CVE-2026-120597

Vendor

Welcart

Product

e-Commerce Plugin

CVSS v3.1

4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness

CWE-79, CWE-94

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   CVE NVD 2h ago

   A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress.

   A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTT_MAIN::error_page_message of the file classes/paymentESCOTT.main.class.php. Such manipulation of the argument…

   PoC public CVSS 4.3 Fix available CVE-2026-120597 Welcart