CVE-2022-3282
Medium
Description
The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from user input sent when submitting the form. As a result, attackers could control the file length limit and bypass the limit set by admins in the contact form.
SeverityMedium
CVSS4.3
Exploit probability—
ProductCodedropz Drag And Drop Multiple File Upload - Contact Form
PublishedOct 17, 2022
First seenOct 17, 2022
How to fix
Update
- codedropz drag_and_drop_multiple_file_upload_-_contact_form_71.3.6.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codedropz drag_and_drop_multiple_file_upload_-_contact_form_7 | v < 1.3.6.5 | 1.3.6.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.