Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

timstrifler — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting timstrifler. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Timstrifler primarily focuses on web application security research, identifying vulnerabilities in popular software and frameworks. The researcher has discovered 17 CVEs, with a historical emphasis on remote code execution, cross-site scripting, and privilege escalation flaws. Notable characteristics include targeting widely used content management systems and e-commerce platforms, often uncovering chainable vulnerabilities. While no major public security incidents are directly attributed to this researcher, their findings have consistently addressed critical flaws in high-impact software, contributing to improved security postures across multiple vendors. The researcher's work demonstrates a consistent pattern of identifying both standalone vulnerabilities and complex exploit chains that could lead to complete system compromise.

Top products by timstrifler: Exclusive Addons for Elementor
CVE IDTitleCVSSSeverityPublished
CVE-2025-7498 Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown — Exclusive Addons for ElementorCWE-79 6.4 Medium2025-08-06
CVE-2025-4783 Exclusive Addons for Elementor <= 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget — Exclusive Addons for ElementorCWE-79 6.4 Medium2025-05-26
CVE-2025-1571 Exclusive Addons for Elementor <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Image Comparison Widgets — Exclusive Addons for ElementorCWE-79 6.4 Medium2025-02-28
CVE-2024-10312 Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates — Exclusive Addons for ElementorCWE-200 4.3 Medium2024-10-29
CVE-2024-5332 Exclusive Addons for Elementor <= 2.6.9.8 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Card Widget — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-06-26
CVE-2024-4618 Exclusive Addons for Elementor <= 2.6.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-05-15
CVE-2024-2751 Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via InfoBox — Exclusive Addons for ElementorCWE-20 6.4 Medium2024-05-02
CVE-2024-3489 Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-05-02
CVE-2024-2750 Exclusive Addons for Elementor <= 2.6.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget — Exclusive Addons for ElementorCWE-87 6.4 Medium2024-05-02
CVE-2024-2503 Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post Grid — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-05-02
CVE-2024-3985 Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-05-02
CVE-2024-1413 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-03-13
CVE-2024-2028 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-03-13
CVE-2024-1414 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-03-13
CVE-2024-1234 Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-03-13
CVE-2024-0823 Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting — Exclusive Addons for ElementorCWE-79 5.4 Medium2024-02-05
CVE-2024-0824 Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Anything — Exclusive Addons for ElementorCWE-79 6.4 Medium2024-01-27

This page lists every published CVE security advisory associated with timstrifler. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.