Nicepage 4.5.4 Exploit Fixed -

Before diving into the exploit mechanics, we must understand the target. Nicepage is a popular responsive website builder available as a desktop application and a plugin for Content Management Systems (CMS) like WordPress and Joomla. Version 4.5.4, released in early 2023, bridged a transition period where the software moved from standalone HTML exports to deeper CMS integration.

The is a medium-severity, authenticated RCE that affects only outdated plugin versions. It is not being exploited en masse in the wild (yet), but the release of public PoC code means script kiddies will automate attacks within weeks.