CVE-2022-3416

CVE-2022-3416 is a high-severity vulnerability affecting the WPtouch WordPress plugin prior to version 4.3.45. It allows highly privileged users, such as administrators, to upload arbitrary files to the server due to improper image validation, even in scenarios where such uploads should be restricted (e.g., multisite environments). The CVSS score of 7.2 indicates a network-exploitable vulnerability with high impact on confidentiality, integrity, and availability, requiring high privileges but no user interaction. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.