Medium severity5.4NVD Advisory· Published Sep 2, 2026· Updated Sep 3, 2026
CVE-2026-2811
CVE-2026-2811
Description
The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <3.2
Patches
Vulnerability mechanics
References
1News mentions
1- WordPress Plugins: 24 Vulnerabilities Disclosed, Including Two Critical FlawsVypr Intelligence · Sep 2, 2026