Is CVE-2026-2811 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-2811?

CVE-2026-2811 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-2811

Description

The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers.