Nicheaddons

Nicheaddons develops a focused line of WordPress and Elementor page-builder add-ons targeting niche markets including events, restaurants, education, and charity sectors. The vendor's vulnerability portfolio, while modest in scale, concentrates on application-layer input-handling and authorization issues, particularly cross-site scripting, authorization bypass, and access-control weaknesses that are characteristic of web-extension plugins operating within shared WordPress ecosystems. These weakness classes reflect the challenges of sanitizing user input and enforcing role-based access in plugin contexts where multiple tenants or user roles may interact with the same underlying data. Defenders deploying these add-ons should prioritize patch application for the authorization and scripting classes named above, as they recur across the vendor's product line. Current severity, exploitation activity, and exposure counts are shown alongside this summary.