PHP Supported Versions and End-of-Life Dates (2026): Which PHP Versions Are Still Safe?
Updated 24 October 2026. Always confirm on php.net's supported versions page.
"Is my PHP version still safe?" is a question every website owner should be able to answer. After PHP2Shell (explained), where only supported versions got official fixes, it's no longer an abstract one.
PHP support at a glance (October 2026)
| Version | Released | Active support ended / ends | Security support ends | Status today | PHP2Shell fix |
|---|---|---|---|---|---|
| PHP 7.4 | Nov 2019 | Nov 2021 | 28 Nov 2022 | End of life | Minimal source backport only |
| PHP 8.0 | Nov 2020 | Nov 2022 | 26 Nov 2023 | End of life | Minimal source backport only |
| PHP 8.1 | Nov 2021 | Nov 2023 | 31 Dec 2025 | End of life | Minimal source backport only |
| PHP 8.2 | Dec 2022 | 31 Dec 2024 | 31 Dec 2026 | Security fixes only | 8.2.35 |
| PHP 8.3 | Nov 2023 | 31 Dec 2025 | 31 Dec 2027 | Security fixes only | 8.3.36 |
| PHP 8.4 | Nov 2024 | 31 Dec 2026 | 31 Dec 2028 | Active support | 8.4.27 |
| PHP 8.5 | 20 Nov 2025 | 31 Dec 2027 | 31 Dec 2029 | Active support | 8.5.12 |
| PHP 8.6 | Expected 19 Nov 2026 | Release candidates | n/a |
PHP 5.x and 7.0 to 7.3 have been end of life for years and received no PHP2Shell fix.
How PHP's support policy works
Each new PHP version (released every November) gets:
- About two years of active support: bug fixes and security fixes
- About two more years of security-only support
- Support periods now end on 31 December of the relevant year, which makes planning easier
So a version released in November 2024 (8.4) is supported until the end of 2028.
Which version should your website use?
| Your situation | Recommended |
|---|---|
| Typical WordPress business site | PHP 8.3 or 8.4 |
| WooCommerce store | 8.3 or 8.4, after testing checkout and payment plugins |
| Laravel 13 app | 8.3+ (8.4 recommended) (Laravel 13 requirements) |
| New custom project | 8.4 or 8.5 |
| Old site on 7.4 / 8.0 / 8.1 | Upgrade to 8.3 at minimum, ideally 8.4 |
| On 8.2 | Upgrade before 31 Dec 2026 (plan) |
WordPress 7.0 requires PHP 7.4 at minimum but recommends 8.3 or newer (WordPress 7 requirements).
Why "it still works" isn't good enough
Old PHP versions keep running. They just stop being fixed. PHP2Shell showed what that means:
- Supported versions: patched the same day
- PHP 7.4 to 8.1: only minimal source patches; you depend on your host or Linux vendor to build them
- PHP 7.3 and older: nothing
- CISA's advice for PHP 8.1 or older systems that couldn't be patched: take them offline
Newer versions are also faster, which helps page speed and SEO (why speed matters).
"But my host says my old PHP is patched"
Some hosts and vendors (cPanel EasyApache 4, CloudLinux, Ubuntu Pro and others) backport security fixes to end-of-life PHP builds. That's genuinely helpful, but:
- It depends on your host continuing to do it
- Backports may be partial
- Plugins and frameworks drop support for old PHP over time, so you'll fall behind on their fixes too
Treat a backported old version as borrowed time, not a destination.
How to check and change your version
- How to check your website's PHP version
- How to change PHP version in cPanel and Hostinger
- How to upgrade WordPress to a newer PHP version safely
Where we fit
We keep the websites we build and maintain on supported PHP versions, and upgrade older sites with staging tests so nothing breaks. See website development or website design in Shivamogga.
Not sure where your site stands? Get in touch for a free check.
Sources
Wbzard Labs
Want this done for your business?
We help founders in Bangalore and Shivamogga launch with a website, social media, SEO and ads that work together. Tell us about your business and get a free launch plan.