On 21 October, websites went offline worldwide because of a critical flaw in PHP, and it turned out that sites on an old PHP version get no security update at all. The first question you ask yourself as a business owner: which version is my own website actually running? Here is how to check it in one minute, and what the number means.
Why the PHP version matters
PHP is the programming language WordPress is written in. It runs on your host’s server, not on your computer, and you never see it. Yet that version decides three things: whether your site gets security updates, how fast it is (newer versions are measurably faster) and whether new plugins and themes still work on it. Each PHP version gets about four years of support. After that it goes quiet: flaws are found, but no longer fixed.
How to check it yourself (1 minute)
- Log in to your WordPress dashboard (usually yourdomain.com/wp-admin).
- In the left-hand menu, go to Tools → Site Health.
- Click the Info tab at the top and open the Server section.
- Next to PHP version you will see the number, for example 8.3.36.
Can’t find it in WordPress? In your host’s control panel (DirectAdmin, Plesk, cPanel) the PHP version is usually under “PHP settings” or “Select PHP version”. Otherwise: ask your host. A good host will answer within a day.
What does the number mean?
The first two digits (8.3) are the version, the third (36) is the patch. This is the situation at the time of writing:
| PHP version | Status | Security updates until | Safe patch (Oct. 2026) |
|---|---|---|---|
| 8.5 | Current | end of 2029 | 8.5.12 or higher |
| 8.4 | Current | end of 2028 | 8.4.27 or higher |
| 8.3 | Current | end of 2027 | 8.3.36 or higher |
| 8.2 | Security updates only | end of 2026 | 8.2.35 or higher |
| 8.1, 8.0 | No longer supported | expired | no patch available |
| 7.4 and older | No longer supported | expired | no patch available |
In short: if you see 8.3 or higher, you are fine. If you see 8.2, it is time to plan the upgrade, because support ends there at the end of this year too. If you see 8.1 or lower, your site is currently vulnerable to flaws that will never be fixed.
My site runs an old version. What now?
Upgrading is usually a single setting in the hosting panel, but don’t do it blindly. Old plugins and themes can throw errors on a new PHP version, and suddenly your site is blank. The safe order:
- Make a backup (or check that your host has one from today).
- Update WordPress, plugins and theme first to the latest version. Outdated plugins are the most common cause of problems during a PHP upgrade.
- Test on a copy if your host offers a staging environment. If not: switch the PHP version at a quiet moment and immediately check all important pages (homepage, contact form, checkout).
- Something went wrong? Switch the version back, find out which plugin causes the error and replace it.
This is exactly the work we do for our clients with Verploy: every update, including a PHP upgrade, is first tested on a copy, then applied and checked. If something breaks, the platform automatically restores the previous version. That is why our client sites stayed online on 21 October while many other sites went dark.
And if your host won’t cooperate?
Some hosts don’t offer new PHP versions, or only months after release. That alone is a reason to move: the PHP version is the foundation of your website, and a host that is slow with it is usually slow with security too. Moving sounds bigger than it is; we do it including testing and without downtime.
Want to know for sure how your site is doing?
Leave your website address below. You will receive a short, personal report by email: which PHP version your site runs, how it scores on security, speed and findability, and the three improvements with the most impact. Free and without obligation.
Book a free consultation Ask your question on WhatsApp
Prefer to call? +31 (0)166 700204, Mon–Fri 9:00–17:30 (CET).
