CVE-2018-16308
The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.
Date published : 2018-09-01
https://www.exploit-db.com/exploits/45234/
https://packetstormsecurity.com/files/148993/WordPress-Ninja-Forms-3.3.13-CSV-Injection.html