PHP End of Life Dates: Every PHP Version EOL Date (7.0–8.5)
PHP releases a new minor version every year in November, and each version has a defined end of life date. Running an unsupported PHP version means your application is exposed to unpatched security vulnerabilities — many hosting providers and security scanners flag this as a critical risk. This guide lists the exact EOL date for every PHP version from 7.0 through 8.5, explains the PHP release cycle, and tells you which version you should be running right now.
Key Dates at a Glance
- PHP 8.1: end of life 2025-12-31
- PHP 8.2: end of life 2026-12-31
- PHP 8.4: active support ends 2026-12-31; end of life 2028-12-31
- PHP 8.3: end of life 2027-12-31
- PHP 8.5: active support ends 2027-12-31; end of life 2029-12-31
- PHP 8.0: end of life 2023-11-26
- PHP 7.4: end of life 2022-11-28
PHP EOL Risk Scores
An end-of-life date on its own does not tell you how urgent a version is. We publish an EOL Risk Score (0–100) for every tracked version, combining how long past — or how close to — end of life it is, the attack surface of the software class, whether CISA lists the product in its Known Exploited Vulnerabilities catalog, and whether commercial extended support exists. PHP is an internet-facing runtime named in the KEV catalog, so even supported versions start from an elevated baseline; extended support exists for the retired lines.
| Version | EOL Risk Score | What drives it |
|---|---|---|
| PHP 7.4 | 90 | End of life November 28, 2022 — recency at maximum; runtime attack surface; KEV exposure. |
| PHP 8.0 | 90 | End of life November 26, 2023. |
| PHP 8.1 | 80 | End of life December 31, 2025 — the most common unpatched PHP in production today. |
| PHP 8.2 | 58 | End of life December 31, 2026; the recency factor climbs monthly toward it. |
| PHP 8.3 | 50 | Security-only to December 31, 2027; the supported-runtime baseline. |
| PHP 8.4 | 50 | Active to December 31, 2026, security to December 31, 2028. |
| PHP 8.5 | 50 | Newest; active to December 31, 2027, security to December 31, 2029. |
Scores update automatically at every site build as dates pass and the KEV catalog changes; live values for every version are on the PHP product page, and the methodology is on the EOL Risk Score page.
All PHP Versions — EOL Dates at a Glance
| PHP Version | Release Date | Active Support Ends | Security Support Ends (EOL) | Status |
|---|---|---|---|---|
| PHP 8.5 | Nov 20, 2025 | Dec 31, 2027 | Dec 31, 2029 | Active |
| PHP 8.4 | Nov 21, 2024 | Dec 31, 2026 | Dec 31, 2028 | Active ✓ Recommended |
| PHP 8.3 | Nov 23, 2023 | Dec 31, 2025 | Dec 31, 2027 | Security Only |
| PHP 8.2 | Dec 8, 2022 | Dec 31, 2024 | Dec 31, 2026 | Security Only |
| PHP 8.1 | Nov 25, 2021 | Nov 25, 2023 | Dec 31, 2025 | EOL |
| PHP 8.0 | Nov 26, 2020 | Nov 26, 2022 | Nov 26, 2023 | EOL |
| PHP 7.4 | Nov 28, 2019 | Nov 28, 2021 | Nov 28, 2022 | EOL |
| PHP 7.3 | Dec 6, 2018 | Dec 6, 2020 | Dec 6, 2021 | EOL |
| PHP 7.2 | Nov 30, 2017 | Nov 30, 2019 | Nov 30, 2020 | EOL |
| PHP 7.1 | Dec 1, 2016 | Dec 1, 2018 | Dec 1, 2019 | EOL |
| PHP 7.0 | Dec 3, 2015 | Jan 4, 2018 | Jan 10, 2019 | EOL |
| PHP 5.6 | Aug 28, 2014 | Jan 19, 2017 | Dec 31, 2018 | EOL |
Understanding the PHP Support Lifecycle
Every PHP release (from 8.1 onwards) follows a predictable 4-year lifecycle split into two phases:
Active Support (2 years)
During active support, the PHP team releases regular bug fixes, performance improvements, and security patches. This is the phase where you can rely on the version being maintained fully. New PHP versions begin in active support the day they're released each November.
Security Support Only (2 years)
After active support ends, a PHP version enters a 2-year security-only phase. Only critical security vulnerabilities (CVEs) receive patches — no bug fixes, no performance improvements. This phase is intended to give users time to upgrade, not as a permanent hosting environment.
End of Life (EOL)
After the security support year ends, the version is fully end of life. The PHP team publishes no more patches of any kind. Any newly discovered vulnerabilities — including critical remote code execution flaws — will never be fixed. Running EOL PHP in production is a serious security risk.
PHP 8.4 — Active Support Ends December 31, 2026
PHP 8.4 was released on November 21, 2024. It leaves active support on December 31, 2026 (security fixes only until December 31, 2028), so it is a sound production target through 2026 with a defined date to move on to 8.5. Key improvements in PHP 8.4 include:
- Property hooks — getter and setter logic directly in class property declarations
- Asymmetric visibility —
public private(set)property access modifiers array_find(),array_find_key(),array_any(),array_all()built-in functions- HTML5 parser for the DOM extension (
Dom\HTMLDocument) - Implicit nullable types deprecated to reduce silent bugs
- Performance improvements over PHP 8.3
PHP 8.4 active support ends December 31, 2026. Security-only support extends to December 31, 2028.
PHP 8.3 — Security Only
PHP 8.3, released November 23, 2023, entered security-only support on November 23, 2025. It reaches full end of life on December 31, 2027. PHP 8.3 introduced typed class constants, the json_validate() function, the Randomizer::getBytesFromString() method, and significant performance improvements. If you're on 8.3, plan your upgrade to 8.4 — it's a smooth, backward-compatible migration.
PHP 8.2 — Security Only, EOL December 2026
PHP 8.2, released December 8, 2022, entered security-only support when PHP 8.4 was released (December 8, 2024). It reaches end of life on December 31, 2026. PHP 8.2 introduced readonly classes, the DNF types feature, AllowDynamicProperties deprecations, and the new Random extension. If you're currently on PHP 8.2, you should be planning a migration to 8.4 in 2026 before the EOL date.
PHP 8.1 — End of Life
PHP 8.1 reached end of life on December 31, 2025. It received no further updates after that date — not even security patches. PHP 8.1 introduced enums, fibers (coroutines), intersection types, readonly properties, and never return type. Despite being a significant release, it is now unsupported. If your application is on PHP 8.1, upgrade immediately.
PHP 8.0 — End of Life
PHP 8.0, a landmark release that introduced JIT compilation, union types, named arguments, match expressions, and nullsafe operators, reached end of life November 26, 2023. No patches of any kind have been issued since. Running PHP 8.0 in production is a security liability.
PHP 7.4 — End of Life (November 28, 2022)
PHP 7.4 was the last PHP 7.x release and was widely used for years. It reached end of life on November 28, 2022. As of 2026, PHP 7.4 is nearly 4 years past its EOL date. Hundreds of CVEs have been discovered in PHP 7.x since then that will never be patched. Many hosting providers have dropped PHP 7.4 support entirely or flag it as a critical risk in compliance audits.
PHP 7.3 — End of Life (December 6, 2021)
PHP 7.3 reached end of life on December 6, 2021. It has been unsupported for over 4 years. PHP 7.3 introduced flexible heredoc/nowdoc syntax, list() reference assignment, and is_countable(). These features are all available in PHP 8.x. There is no reason to remain on PHP 7.3.
PHP 7.2 — End of Life (November 30, 2020)
PHP 7.2 reached end of life on November 30, 2020. It introduced the sodium extension, object typehints, and deprecated the each() function. As of 2026, PHP 7.2 has been unsupported for over 5 years. Running it in any environment connected to the internet is critically dangerous.
PHP 8.5 — Newest Release, Active Support to December 31, 2027
PHP 8.5 was released on November 20, 2025, following the annual November release cadence. Active support runs until December 31, 2027, and security-only support extends to December 31, 2029. Migration from 8.4 to 8.5 is smooth — PHP 8.x has maintained strong backward compatibility across minor releases.
How to Check Your Current PHP Version
From the command line:
php -v
# Example: PHP 8.4.7 (cli) (built: Apr 15 2026)
From a PHP script:
<?php
echo phpversion();
// or
echo PHP_VERSION;
From WordPress admin: Settings → Site Health → Info → Server → PHP version.
How to Upgrade PHP
The upgrade path depends on your platform:
Ubuntu/Debian
sudo add-apt-repository ppa:ondrej/php
sudo apt update
sudo apt install php8.4
sudo update-alternatives --set php /usr/bin/php8.4
RHEL / CentOS / AlmaLinux
sudo dnf module reset php
sudo dnf module enable php:8.4
sudo dnf install php
Managed Hosting
Most cPanel, Plesk, and managed WordPress hosts let you switch PHP versions from their control panel. Look for "PHP Version Manager" or "MultiPHP Manager" in cPanel, or "PHP Settings" in Plesk.
PHP Version Compatibility Notes
- PHP 8.0 → Deprecated many previously valid constructs. Test thoroughly for
E_DEPRECATEDnotices before upgrading from PHP 7.x. - PHP 8.1 → Enums and fibers are additive.
Passing nullto many internal functions that don't accept nullable types now emits deprecation notices. - PHP 8.2 → Deprecated dynamic properties (use
#[AllowDynamicProperties]or fix the issue). Deprecated some deprecated string interpolation forms. - PHP 8.3 → Largely backward-compatible with 8.2. Typed class constants may require attention in strict type environments.
- PHP 8.4 → Implicit nullable parameter types (e.g.,
function foo(Type $x = null)) are deprecated — the fix is explicit?Type. Check your codebase before upgrading.
PHP currently carries an EOL Risk Score™ of 80/100 — Grade D, high risk, recalculated at every site build from EOL recency, attack surface, CISA KEV exposure, and extended-support availability. Per-version scores and dates are on the PHP lifecycle page.
The right response comes down to one question: how many more years does this system need to run? Under a year, extended support (where it exists) is usually cheaper than an emergency migration. One to three years, migrate — support fees paid repeatedly cost more than doing the project once. Indefinitely, migrate now and plan the next one before it surprises you. Extended support is often the more expensive choice over a multi-year horizon — a bridge, not a destination. And if this deadline feels like vendor caprice, it isn’t — why end of life is inevitable for every version, with the receipts.
Frequently Asked Questions
Is PHP 8.2 still supported?
Yes, but only for security patches until December 31, 2026. No bug fixes are issued. You should plan to upgrade to PHP 8.4 before that date.
When did PHP 7.4 reach end of life?
PHP 7.4 reached full end of life on November 28, 2022. It has not received any patches — including security patches — since that date.
What is the current PHP version in 2026?
PHP 8.4 (released November 2024) and PHP 8.5 (released November 20, 2025) are the current releases. PHP 8.4 is the widely recommended version for production; PHP 8.5 is also stable and receiving active support.
When is PHP 8.3 end of life?
PHP 8.3 active support ended November 23, 2025. Security-only support continues until December 31, 2027.
When is PHP 8.4 end of life?
PHP 8.4 active support ends December 31, 2026. Security support extends to December 31, 2028.
What PHP versions does WordPress support?
WordPress recommends PHP 8.1 or higher. As of 2026, WordPress officially supports PHP 8.0 through PHP 8.4. Using PHP 8.4 with WordPress is recommended for best performance and future compatibility.
Does PHP have long-term support (LTS) versions?
No. PHP does not designate LTS versions — all releases (from PHP 8.1 onwards) follow the same 4-year (2 active + 2 security) lifecycle. Every version has the same support duration.
What is the PHP 8.4 support end date?
PHP 8.4 is fully supported (active + security) until December 31, 2028.
Related Resources
- PHP version data on endoflife.ai
- Django End of Life Guide
- Node.js End of Life Guide
- RHEL End of Life Guide
The Monthly EOL Digest™
Once a month — critical EOL dates, CVE blind spots, and lifecycle changes worth knowing about.