Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-124415 EUVD-2026-125429GHSA-m2x2-rcgp-h6j7

WordPress Alex Reservations plugin <= 2.4.8 - SQL Injection vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandro Alex Reservations alex-reservations allows SQL Injection.This issue affects Alex Reservations: from n/a through 2.4.8.

Affected products

VendorProductAffectedFixed
Alejandro Alex Reservations ≤ 2.4.8 —

References