wordpress Helm chart

Name: wordpress Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

sb-helm-charts

Scored 14 Sept 2026

The world's most popular CMS - WordPress with MySQL/MariaDB

Latest 0.4.0 9 months agodeploys tag 6.4.3-apache 0Artifact Hub

wordpress 0.4.0 deploys 2 container images: library/mysql and library/wordpress. Across them, 1,144 findings — 9 critical, 14 high — 3 on CISA KEV. The highest contribution is DEBIAN-CVE-2024-38475 in apache2 2.4.57-2, fixed in 2.4.61-1~deb12u1.

Radar Score

13,510914200918

1,144 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/mysql	8.0-debian	0028184	2,084
library/wordpress×2	6.4.3-apache	914172734	11,426

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

978 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-4878	libcap2@1:2.66-4+deb12u2+b2	1:2.66-4+deb12u3
Low	DEBIAN-CVE-2026-11979	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2023-2908	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-7168	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2023-25433	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-86140	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-41069	libheif@1.15.1-1	no fix listed
Low	DEBIAN-CVE-2026-33905	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u9
Low	DEBIAN-CVE-2023-26966	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2025-15367	python3.11@3.11.2-6	no fix listed
Low	DSA-5998-1	cups@2.4.2-3+deb12u5	2.4.2-3+deb12u9
Low	DEBIAN-CVE-2024-33869	ghostscript@10.0.0~dfsg-11+deb12u3	10.0.0~dfsg-11+deb12u4
Low	DEBIAN-CVE-2026-3783	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15
Low	DEBIAN-CVE-2026-4873	curl@7.88.1-10+deb12u5	no fix listed
Low	DSA-6189-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u4
Low	DEBIAN-CVE-2026-26983	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8
Low	DEBIAN-CVE-2026-34743	xz-utils@5.4.1-1	5.4.1-1+deb12u1
Low	DEBIAN-CVE-2026-5704	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-45664	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u10
Low	DEBIAN-CVE-2026-3441	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-41079	cups@2.4.2-3+deb12u5	no fix listed
Low	DEBIAN-CVE-2026-33899	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u9
Low	DEBIAN-CVE-2026-58055	nghttp2@1.52.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2023-26965	tiff@4.5.0-6+deb12u1	4.5.0-6+deb12u2
Low	DEBIAN-CVE-2026-7010	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-19487	perl@5.36.0-7+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-22801	libpng1.6@1.6.39-2	1.6.39-2+deb12u2
Low	DEBIAN-CVE-2023-52426	expat@2.5.0-1	no fix listed
Low	DEBIAN-CVE-2026-52492	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-33006	apache2@2.4.57-2	2.4.67-1~deb12u2
Low	DEBIAN-CVE-2025-55160	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-89158	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2026-56361	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u12
Low	DEBIAN-CVE-2025-27587	openssl@3.0.19-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2025-7462	ghostscript@10.0.0~dfsg-11+deb12u3	10.0.0~dfsg-11+deb12u8
Low	DEBIAN-CVE-2026-24484	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u7
Low	DEBIAN-CVE-2026-55594	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u12
Low	DSA-5796-1	libheif@1.15.1-1	1.15.1-1+deb12u1
Low	DEBIAN-CVE-2025-4373	glib2.0@2.74.6-2	2.74.6-2+deb12u7
Low	DEBIAN-CVE-2026-33857	apache2@2.4.57-2	2.4.67-1~deb12u2
Low	DEBIAN-CVE-2013-4392	systemd@252.39-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-30883	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u8
Low	DEBIAN-CVE-2026-56370	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u12
Low	DEBIAN-CVE-2026-34979	cups@2.4.2-3+deb12u5	no fix listed
Low	DEBIAN-CVE-2026-78408	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-61860	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2026-61868	imagemagick@8:6.9.11.60+dfsg-1.6+deb12u1	8:6.9.11.60+dfsg-1.6+deb12u13
Low	DEBIAN-CVE-2024-56826	openjpeg2@2.5.0-2	2.5.0-2+deb12u1
Low	DEBIAN-CVE-2023-49582	apr@1.7.2-3	1.7.2-3+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.0latest	9 months ago	6.4.3-apache	914200918	13,510

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/sb-helm-charts/wordpress.svg)](https://charts.stackradar.io/charts/sb-helm-charts/wordpress)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.