PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-39698 PublisherDesk CVE debrief

A Missing Authorization vulnerability exists in The Publisher Desk ads.txt plugin, affecting versions from n/a through 1.5.0. This issue relates to Exploiting Incorrectly Configured Access Control Security Levels, with a CVSS score of 5.3 and a severity of MEDIUM. The vulnerability allows for unauthorized actions due to incorrectly configured access control security levels. Users should be aware of the potential risks and take necessary actions to secure their installations. The CVE record was published on 2026-04-08T09:16:42.307Z and has not been modified since.

Vendor
PublisherDesk
Product
The Publisher Desk ads.txt (plugin)
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-08
Original CVE updated
2026-07-24
Advisory published
2026-04-08
Advisory updated
2026-07-24

Who should care

Users of The Publisher Desk ads.txt plugin, especially those using versions up to 1.5.0, should be aware of this vulnerability and take necessary actions to secure their installations. System administrators, security teams, and operators using the plugin should review the vulnerability details and implement necessary mitigations.

Technical summary

The Publisher Desk ads.txt plugin has a Missing Authorization vulnerability. This issue allows for Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. It affects versions from n/a through 1.5.0. The plugin's functionality can be exploited due to the lack of proper authorization checks, potentially leading to unauthorized actions.

Defensive priority

Medium priority due to the potential for unauthorized actions. The vulnerability's impact can be mitigated with proper configuration and security measures.

Recommended defensive actions

  • Inventory and verify the version of The Publisher Desk ads.txt plugin in use.
  • Apply updates or patches if available, specifically upgrading beyond version 1.5.0 if necessary.
  • Implement compensating controls to monitor and restrict access to the plugin's functionality.
  • Monitor for any suspicious activity related to the plugin.
  • Review and verify the configuration of access control security levels for the plugin.
  • Conduct a thorough review of the plugin's functionality and potential impact on the system.
  • Ensure that the plugin is properly configured and secured according to best practices.

Evidence notes

The CVE record was published on 2026-04-08T09:16:42.307Z and has not been modified since. The NVD entry is currently Deferred. Limited details are available about the specific impacts and exploitability of this vulnerability. The source item URL provides additional context about the CVE. The official CVE record and NVD detail page offer further information on the vulnerability.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-08T09:16:42.307Z and has not been modified since. The NVD entry is currently Deferred.