CVE-2015-3173

CVE-2015-3173

Vendor N/A

Product custom-content-type-manager

Weakness CWE-94 · Code injection

Published July 6, 2022

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.

Key dates

02Disclosure timeline

July 6, 2022 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2015-3173 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2025-61588 risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read` CVE-2025-59302 Apache CloudStack: Potential remote code execution on Javascript engine defined rules CVE-2024-21513 CVE-2026-32613 Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling CVE-2025-53928 MaxKB has RCE in MCP call