Consus

Consus has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Consus has a vendor fix available, so running the current release closes it.

All of these findings were reported by Dhabaleshwar Das. Consus is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Consus vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-34810

Extend Themes <= (Multiple Versions) - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2024-05-13 00:00	Extend Themes <= (Multiple Versions) - Cross-Site Request Forgery Consus <= 1.0.6	`CVE-2024-34810`	4.3 Medium	Dhabaleshwar Das	Yes

Showing 1–1 of 1 reports

Latestv1.0.33

Consus

Author

Extend Themes

2.0(1)

40/100

Last Updated

2026-08-11 (1mo ago)

Active Installs

400+

Downloads

21,617

Requires WP

5.8+

Requires PHP

7.1+

Created

2023-01-30 (4y ago)

Consus is an innovative, easily customizable, multi-purpose theme, focused on empowering users to build astonishing WordPress websites. Consus is mainly designed for small businesses, startups, or personal portfolio websites and works perfectly with Kubio Page Builder which enriches the WordPress block editor with a variety of new blocks and advanced styling options to give you full design freedom.