CVE-2026-2811

The Ajaxify Comments plugin for WordPress versions prior to 3.2 is susceptible to HTTP Header Injection due to inadequate input sanitization and output escaping of user-supplied data. This vulnerability allows unauthenticated attackers to inject arbitrary HTTP headers, potentially leading to various attacks such as session hijacking or cross-site scripting. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk.