← All advisories

High severity7.2NVD Advisory· Published Jul 6, 2022· Updated Jun 17, 2026

CVE-2015-3173

CVE-2015-3173

Description

custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Custom Content Type Manager Project/Custom Content Type Manager
cpe:2.3:a:custom_content_type_manager_project:custom_content_type_manager:*:*:*:*:*:wordpress:*:*
Range: <0.9.8.6
WordPress/custom-content-type-managercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

3

blog.nettitude.com/uk/custom-content-type-manager-remote-code-executionnvdExploitThird Party Advisory
wpscan.com/vulnerability/6b3d0736-7f08-4403-95eb-4385cb206f9envdExploitThird Party Advisory
github.com/craftsmancoding/custom-content-type-manager/blob/master/readme.txtnvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.