CVE-2026-39698

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Missing authorization in the The Publisher Desk ads.txt plugin allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 1.5.0.

Risk Assessment

An attacker could gain unauthorized access to the ads.txt file, potentially leading to ad manipulation and financial losses.

Recommendation

Update the The Publisher Desk ads.txt plugin to the latest version that includes a fix for the missing authorization.

Original NVD description (English source)

Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Publisher Desk ads.txt: from n/a through <= 1.5.0.