Critical · 9.8 CVE-2025-9314 EUVD-2025-210834GHSA-f4rp-wjf2-c8p8

Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by WPScan

Description

The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component

Vendor	Product	Affected	Fixed
—	Developer Tools	≤ 1.1.3	—