CVE-2015-3173

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	custom-content-type-manager	custom-content-type-manager 0.9.8

References

https://blog.nettitude.com/uk/custom-content-type-manager-remote-code-executionExploit, Third Party Advisory
https://github.com/craftsmancoding/custom-content-type-manager/blob/master/readme.txtRelease Notes, Third Party Advisory
https://wpscan.com/vulnerability/6b3d0736-7f08-4403-95eb-4385cb206f9eExploit, Third Party Advisory
https://blog.nettitude.com/uk/custom-content-type-manager-remote-code-executionExploit, Third Party Advisory
https://github.com/craftsmancoding/custom-content-type-manager/blob/master/readme.txtRelease Notes, Third Party Advisory
https://wpscan.com/vulnerability/6b3d0736-7f08-4403-95eb-4385cb206f9eExploit, Third Party Advisory

Timeline

Published: Jul 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-31743.5mod/quiz/db/access.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not set the RISK_XSS bi CVE-2015-31755.8Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote CVE-2015-31764.3The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8 CVE-2015-31773.5Moodle 2.8.x before 2.8.6 does not consider the tool/monitor:subscribe capability before entering subscriptions to site-wide event-monitor r CVE-2015-31783.5Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2 CVE-2015-31793.5login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users CVE-2015-31804.0lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated u CVE-2015-31814.0files/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not consider the moodle/CVE-2015-31825.5epan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1.10.14 mishandles a certain strdup return va CVE-2015-31835.0The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remot CVE-2015-31845.0mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict an CVE-2015-31854.3The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require direct