Your website runs a PHP version that no longer gets security fixes

PHP versions get security fixes for about three years. After that, every new flaw stays open on your server. Moving to a supported version is usually one click on shared hosting, after checking your site's plugins support it.

Difficulty
medium
Time
about 30 minutes
Last reviewed
2026-10-26

Is this urgent?

This month.

Easy fix, no technical skills

  1. Find your version: our website scan shows it, or WordPress admin, Tools, Site Health, Info, Server.

  2. cPanel: Software, Select PHP Version (or MultiPHP Manager), choose the newest supported version, save, and test the site. If something breaks, switch back and ask the plugin's support.

  3. Managed WordPress hosts: the PHP version is in the host's dashboard.

  4. Update WordPress, plugins and themes first; old ones are what breaks on new PHP.

Hand it to your IT person

Copy this into an email or chat. Replace the brackets with the details from your alert.

example.com runs PHP (version), which is past end of life. Please move to a supported PHP version after checking plugin compatibility, and test the site.
Technical fix (commands)
  1. Current version and what the site expects.

    php -v
    wp cli info
  2. Ubuntu: install a newer PHP-FPM and switch Nginx to it.

    sudo apt install php8.3-fpm php8.3-mysql php8.3-xml php8.3-curl php8.3-gd php8.3-mbstring php8.3-zip
    # in the server block: fastcgi_pass unix:/run/php/php8.3-fpm.sock;
    sudo nginx -t && sudo systemctl reload nginx

Check it worked

  • php -v or Site Health shows a supported version; the site loads and checkout works.

Scan the site's software with the free tool. All free tools.

Prevent it next time

  • Check endoflife.date/php once a year.
  • Vulnerability Watch alerts you before a version reaches end of life.

Common questions

Is this urgent?

This month.

Can I fix this without technical skills?

Yes. The easy fix below needs no technical skills; the commands are only for your IT person.

How long does it take?

About 30 minutes once you know who runs the website.

Hear about this before your customers do

Add your website and we check uptime, certificates, domains and email security for you, free.