CVE-2026-120597 medium vulnerability summary
A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTT_MAIN::error_page_message of the file classes/paymentESCOTT.main.class.php. Such manipulation of the...
CVE-2026-120597 is a Medium severity vulnerability notice that security teams should triage for exposure in their own environments.
What to review
The affected area appears to involve A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTT_MAIN::error_page_message. Administrators should compare this notice against their asset inventory, dependency list, and externally exposed services.
Recommended action
Confirm whether the affected product or library is present, review vendor guidance, prioritize patching based on internet exposure and severity, and monitor logs for suspicious behavior tied to the affected component.
This brief is based on information from Tenable Newest CVEs . Please refer to the original source for the complete advisory and vendor-specific guidance.
Related Posts
Multiple Vulnerabilities in Oracle Application Object Library
About CSAInformation forAlerts & AdvisoriesNews & EventsLegislationOur ProgrammesResourcesHomeAlerts & AdvisoriesAlertsMultiple Vulnerabilities in Oracle Application Object LibraryAlertsMultiple Vulnerabilities in Oracle...
Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
Active exploitation of PHP2Shell has been reported against Palo Alto Networks firewalls running affected PAN-OS versions. Attackers have also reportedly chained these vulnerabilities with a separate Linux kernel flaw to...
CVE-2026-120752 high vulnerability summary
PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who c...