pear vulnerabilities
9 published CVEs name pear among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 3Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-25241
PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint
pear · pearweb
Critical9.3 - CVE-2026-25240
PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter
pear · pearweb
Medium6.9 - CVE-2026-25239
PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename
pear · pearweb
High8.2 - CVE-2026-25238
PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation
pear · pearweb
Critical9.2 - CVE-2026-25237
PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails
pear · pearweb
Critical9.2 - CVE-2026-25236
PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
pear · pearweb
Medium6.9 - CVE-2026-25235
PEAR Has a Predictable Verification Hash in Election Account Requests
pear · pearweb
High8.2 - CVE-2026-25234
PEAR is Vulnerable to SQL Injection in Category Deletion
pear · pearweb
Medium5.3 - CVE-2026-25233
PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
pear · pearweb
High7.1