Security Advisory
CVE-2026-2811
5.4
MEDIUM
Vulnerability Description
The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers.
Published Date
September 2, 2026
Official Source
NIST NVD Advisory