Ran into problem where mod_security2 does not allow file uploads in WordPress, the solution is in the mod_security config file
modsecurity_crs_20_protocol_violations.conf
you need to comment out the SecRule that mentions “malformed data”, this will allow the upload of chunked data via the wordpress upload
