CVE-2025-9314

Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component

Affected

Developer Tools

CVSS v3.1 WPSCAN

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.30% chance of exploitation in the next 30 days, 22nd percentile

Published

2026-09-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/0b1d9bfa-f7fa-4c6b-a310-699a47267e51/

References

• CVE Record
• NVD entry