Lucas torres (Rooting)

Lucas torres (Rooting) is a security researcher credited with 4 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #981 of 3,823 contributors. The disclosure was published in 2026.

Their research concentrates on Cross-Site Scripting, which accounts for 4 of their findings (100%). The average CVSS score across these disclosures is 6.4, peaking at 6.4.

The most affected software includes Bold Page Builder (4), across 1 distinct plugins, themes and core versions in total.

All 4 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#981

of 3,823 researchers

Vulns

Critical0

High0

Medium4

Low0

Affected Assets

1plugin

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

4 records


2026-09-29 19:35	Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter Bold Page Builder <= 5.7.2	`CVE-2026-6173`	6.4 Medium	Lucas torres (Rooting)	Yes
2026-09-29 19:34	Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute Bold Page Builder <= 5.7.2	`CVE-2026-6170`	6.4 Medium	Lucas torres (Rooting)	Yes
2026-09-29 19:33	Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute Bold Page Builder <= 5.7.2	`CVE-2026-6171`	6.4 Medium	Lucas torres (Rooting)	Yes
2026-09-29 19:32	Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter Bold Page Builder <= 5.7.2	`CVE-2026-6172`	6.4 Medium	Lucas torres (Rooting)	Yes

Showing 1–4 of 4 reports