CVE-2026-2811 — Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection

CVE-2026-2811

Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection PUBLISHED

Description (CNA)

The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers.

Affected (CNA)

Vendor / product	Versions
Unknown / Ajaxify Comments	affected 0 before 3.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/48250628-9b81-4bef-b623-356ceca01215/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.