Security Advisory
CVE-2015-3173
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.