AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-3282

MEDIUM · CVSS 4.3 EPSS 0.55%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-10-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-3282
Severity
MEDIUM
CVSS
4.3
EPSS
0.55%
WordPress

Original NVD Description

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from user input sent when submitting the form. As a result, attackers could control the file length limit and bypass the limit set by admins in the contact form.