Custom Content Type Manager

Custom Content Type Manager has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2016; all 2 are fixed as of September 2026. Their average CVSS score is 8.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high.

The most common weakness is Code Injection, behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

Every one of the 2 issues recorded for Custom Content Type Manager has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Iain Wallace.

Strategic Overview

Avg CVSSHigh

8.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Custom Content Type Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8

Custom Content Type Manager 0.9.8.7 - 0.9.8.8 - Malicious Backdoor

Read the full analysis

Vulnerability Records

2 records


2016-03-04 00:00	Custom Content Type Manager 0.9.8.7 - 0.9.8.8 - Malicious Backdoor Custom Content Type Manager 0.9.8.7 – 0.9.8.8	`N/A`	9.8 Critical	Anonymous	Yes
2015-05-21 00:00	Custom Content Type Manager <= 0.9.8.5 - Authenticated (Admin+) Remote Code Execution Custom Content Type Manager <= 0.9.8.5	`CVE-2015-3173`	7.2 High	Iain Wallace	Yes

Showing 1–2 of 2 reports