CVE-2025-9314

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component

Published Sep 2, 2026
CVSS 9.8 critical
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

Unknown Developer Tools

CVE-2025-9314 at the National Vulnerability Database