Nicepage 4160 Exploit Upd May 2026

DO NOT just delete the plugin. The exploit is version-specific.

Nicepage (CMS/website builder) had a reported remote code execution (RCE) / file upload vulnerability affecting versions around 4.1.60 (reference string: "nicepage 4160") that allows unauthenticated attackers to upload or execute arbitrary files via insufficient input validation on an upload/handler endpoint. This report summarizes impact, technical details, detection, remediation, and recommended mitigations. nicepage 4160 exploit upd

The tag "upd" is the most critical part of the search query. In exploit development, "upd" usually refers to one of two things: DO NOT just delete the plugin

In the case of Nicepage 4160, "upd" refers to a Privileged File Update/Overwrite vulnerability. Attackers discovered that the Nicepage 4160 plugin does not properly verify nonces or capabilities when processing a POST request to /wp-admin/admin-ajax.php?action=nicepage_save_global_style. In the case of Nicepage 4160, "upd" refers