CVE-2025-9314

CVSS 9.8 (critical) · published 2026-09-02

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component

Weakness: CWE-434

Source: NVD CVE-2025-9314

References

• https://wpscan.com/vulnerability/0b1d9bfa-f7fa-4c6b-a310-699a47267e51/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.