Security Advisory
CVE-2015-3173
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.