Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

timstrifler — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting timstrifler. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Timstrifler primarily focuses on web application security research, identifying vulnerabilities in popular software and frameworks. The researcher has discovered 17 CVEs, with a historical emphasis on remote code execution, cross-site scripting, and privilege escalation flaws. Notable characteristics include targeting widely used content management systems and e-commerce platforms, often uncovering chainable vulnerabilities. While no major public security incidents are directly attributed to this researcher, their findings have consistently addressed critical flaws in high-impact software, contributing to improved security postures across multiple vendors. The researcher's work demonstrates a consistent pattern of identifying both standalone vulnerabilities and complex exploit chains that could lead to complete system compromise.

Top products by timstrifler: Exclusive Addons for Elementor
CVE ID Title CVSS Severity Published
CVE-2026-12231 Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'exad_infobox_image' — Exclusive Addons for Elementor CWE-79 6.4 Medium 2026-08-02
CVE-2026-11328 Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title — Exclusive Addons for Elementor CWE-79 6.4 Medium 2026-07-07
CVE-2025-7498 Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown — Exclusive Addons for Elementor CWE-79 6.4 Medium 2025-08-06
CVE-2025-4783 Exclusive Addons for Elementor <= 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget — Exclusive Addons for Elementor CWE-79 6.4 Medium 2025-05-26
CVE-2025-1571 Exclusive Addons for Elementor <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Image Comparison Widgets — Exclusive Addons for Elementor CWE-79 6.4 Medium 2025-02-28
CVE-2024-10312 Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates — Exclusive Addons for Elementor CWE-200 4.3 Medium 2024-10-29
CVE-2024-5332 Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-06-26
CVE-2024-4618 Exclusive Addons for Elementor <= 2.6.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-05-15
CVE-2024-2751 Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via InfoBox — Exclusive Addons for Elementor CWE-20 6.4 Medium 2024-05-02
CVE-2024-3489 Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-05-02
CVE-2024-2750 Exclusive Addons for Elementor <= 2.6.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget — Exclusive Addons for Elementor CWE-87 6.4 Medium 2024-05-02
CVE-2024-2503 Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post Grid — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-05-02
CVE-2024-3985 Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-05-02
CVE-2024-1413 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-03-13
CVE-2024-2028 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-03-13
CVE-2024-1414 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-03-13
CVE-2024-1234 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-03-13
CVE-2024-0823 Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting — Exclusive Addons for Elementor CWE-79 5.4 Medium 2024-02-05
CVE-2024-0824 Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Anything — Exclusive Addons for Elementor CWE-79 6.4 Medium 2024-01-27

This page lists every published CVE security advisory associated with timstrifler. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.