Common · easy to miss
End-of-life PHP: no more security fixes
Every PHP version gets two years of bug fixes, then two more of security fixes only. After that, new flaws are never fixed in that version, however serious.
Why it matters to you
An end-of-life version is one of the most common findings when an insurer, client or auditor looks at a website. It also means the next critical flaw has no official fix for you.
Check it yourself
- 01Find your PHP version: the “PHP version” setting in your hosting panel, WordPress Tools, Site Health, Info, Server, or
php -v. - 02Compare it with the supported list on the versions page.
- 03Check that your plugins, themes and code support the next version before you change anything.
Fix it
- 01Pick the newest supported version your software runs on. Today that is 8.4 or 8.5.
- 02Test on a copy: the site, forms, checkout and scheduled jobs.
- 03Update or replace plugins, themes and packages that block the upgrade.
- 04Switch over with a backup and a rollback plan, then confirm the version that’s running.
How PatchRig helps
PatchRig upgrades PHP on a copy first, tests the site, switches over with a rollback plan, and confirms the version actually running.
Check your site free, in under a minute.