medium5.4
CVE-2026-2811
The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supp…
Impact
The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers.
Affected products
| Product | Affected versions |
|---|---|
| Ajaxify Comments WordPress Plugin | before 3.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.