Skip to content
OpenAdvisories

Vendor

pi-hole

38 known vulnerabilities.

Products

web 11 pi-hole 9 FTL 8 AdminLTE 7 pi-hole/adminlte 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-53533 Public exploit Scanner template

    Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page

    Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting (XSS) via a malformed…

    pi-hole web
  • Medium 5.3
    CVE-2022-23513 Public exploit EPSS 42%

    Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint

    Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on `queryads` endpoint. …

    pi-hole AdminLTE
  • Medium 6.3
    CVE-2021-29449 Public exploit

    Multiple Privilege Escalation Vulnerabilities Pihole

    Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details.

    pi-hole pi-hole