What PHP version should WordPress use in 2026?

What PHP version should WordPress use? Right now, the answer is PHP 8.3 or newer. That is what WordPress itself recommends, and PHP 8.3 and 8.4 are both still getting security fixes from the people who make PHP. If your site is on PHP 8.2 or older, it's time to plan an upgrade, because PHP 8.2 stops getting security fixes on 31 December 2026.

This guide is for anyone who owns a WordPress website and isn't sure what's running behind it. You don't need to be technical.

We'll explain what PHP is in plain words, how to check your version in two minutes, which version to choose, and how to upgrade without breaking anything.

The short version

• WordPress recommends PHP 8.3 or greater. That's the version to aim for today.
• PHP 8.2 gets its last security fixes on 31 December 2026. PHP 8.1 and older are already out of support.
• You can check your version in WordPress under Tools, then Site Health, then the Info tab.
• Your hosting company controls PHP. Most let you change it in your control panel, or will do it for you.
• Always take a backup and test first. Old plugins and themes are what usually break, not WordPress itself.

What is PHP, and why does WordPress need it?

PHP is the programming language WordPress is written in. It runs on your web server, not in your visitor's browser.

Every time someone opens a page on your site, the server uses PHP to build that page. It pulls your words and images from the database and turns them into the page people see.

So PHP is a bit like the engine in a car. You rarely think about it. However, if it's old and nobody is making parts for it any more, problems start to creep in.

Your PHP version is set by your hosting company, not by WordPress. That's why updating WordPress and your plugins doesn't update PHP. It's a separate job.

What PHP version should WordPress use in 2026?

The official WordPress requirements page recommends PHP version 8.3 or greater. It also recommends MySQL 8.0 or MariaDB 10.11 or greater for the database, plus HTTPS support.

WordPress will still run on PHP 7.4. However, the same page warns that these older versions have reached their official end of life and may expose your site to security vulnerabilities.

In other words, "it still works" is not the same as "it's safe".

Which PHP versions are still supported?

The PHP project publishes its own supported versions timeline. Each version gets about two years of active support (bug fixes and security fixes), then about two more years of security fixes only. After that, it gets nothing.

PHP version	Security fixes until	What it means for your site
8.1 and older	Already ended	Upgrade now. No more security fixes.
8.2	31 December 2026	Plan your upgrade before the end of the year.
8.3	31 December 2027	A safe, well-tested choice. WordPress's recommended minimum.
8.4	31 December 2028	A good choice if your plugins and theme support it.
8.5	31 December 2029	The newest. Fine once you've checked everything works.

Dates are taken from php.net at the time of writing. They don't usually change, but it's worth checking the page if you're reading this later.

Does the latest WordPress support PHP 8.4 and 8.5?

Yes. The WordPress PHP compatibility table shows WordPress 6.9 and later support PHP 8.3, 8.4 and 8.5. WordPress 7.0 arrived in May 2026, and the current 7.1 branch supports all three too.

WordPress 7.0 also dropped support for PHP 7.2 and 7.3. So if your site is on one of those, it can't move to the latest WordPress until PHP is upgraded.

The catch is your plugins and theme. WordPress core may be ready, but a plugin that hasn't been updated in years may not be.

Why does an old PHP version matter?

There are three good reasons to keep PHP current. None of them are scare stories. They're simply how software works.

1. Security

Once a PHP version is out of support, any new security hole found in it stays open. WordPress puts this plainly on its update PHP page: older versions of PHP do not get security updates, so updating is essential to keep your site secure.

Outdated software is one of the main reasons sites get broken into. We covered the other common causes in why WordPress websites get hacked.

2. Speed

Newer PHP versions are generally faster at building pages. A faster server response helps your pages load sooner, which matters for visitors and for Google. If speed is on your mind, our post on how we got our website to 100 on Google PageSpeed explains the other things that make a difference.

3. Compatibility

Plugin and theme developers move on. Over time, new versions of plugins stop supporting old PHP. Then you're stuck: you can't update your plugins, so they fall behind on security fixes too. One old part holds the whole site back.

How do I check which PHP version my WordPress site uses?

You can check without logging in to your hosting account. Here's how:

1. Log in to your WordPress dashboard.
2. Go to Tools, then Site Health.
3. Click the Info tab at the top.
4. Open the Server section.
5. Look for the line that says PHP version.

While you're on the Site Health screen, look at the Status tab too. WordPress will often flag an outdated PHP version there as a recommended improvement.

If you can't see the Tools menu, you may not have administrator access. Ask whoever built or looks after your site.

How to upgrade PHP safely, step by step

Upgrading PHP is usually quick. The care is in the preparation. Follow these steps in order:

1. Take a full backup. Back up both your files and your database, and make sure you know how to restore it. A backup you can't restore isn't much use.
2. Update everything first. Update WordPress, your theme and all your plugins to their latest versions. Newer versions are far more likely to support newer PHP.
3. Remove what you don't use. Delete inactive plugins and themes. Fewer moving parts means fewer things to go wrong.
4. Look for abandoned plugins. On each plugin's WordPress.org page, check when it was last updated. A plugin that hasn't been touched in years is the most likely thing to break.
5. Test on a staging site if you can. A staging site is a private copy of your website for testing. Many hosts offer one with a single click. Switch the copy to the new PHP version and click around.
6. Change the PHP version. In your hosting control panel, find the PHP settings (often called "PHP version" or "PHP selector") and choose 8.3 or 8.4. If you can't find it, ask your host to do it.
7. Check the important pages. Visit your homepage, contact form, any booking or shop pages and the WordPress dashboard. Send yourself a test enquiry.
8. Know how to roll back. If something breaks, switch PHP back to the previous version in the same place. That buys you time to fix the plugin causing trouble.

What if my site breaks after a PHP update?

Don't panic. A PHP change is one of the easier problems to undo.

The most common signs are a blank white page, a message saying "There has been a critical error on this website", or one feature that stops working, such as a form or slider.

First, switch back to your previous PHP version to get the site working again. Then look at what failed. WordPress usually emails the site administrator with details of which plugin or theme caused a critical error.

The fix is normally one of three things: update the plugin, replace it with a maintained alternative, or have a developer fix the old code. Once that's done, try the upgrade again.

Is this my job or my host's job?

It depends on your hosting. With basic shared hosting, choosing your PHP version is usually left to you. Some hosts upgrade old versions automatically, sometimes with little warning, which can catch sites out.

With managed WordPress hosting, the host or your web developer normally looks after it. Either way, it's worth asking a simple question: "Who is responsible for keeping PHP up to date on my site, and will you test it first?"

If nobody can answer clearly, that's a sign your site needs a proper maintenance plan. We explain what good maintenance covers in why website maintenance is essential for your business.

From our experience

Andy has worked with WordPress since 2009, through a lot of PHP upgrades. In our experience, the PHP upgrade itself is rarely the problem. The problem is the one old plugin or theme that nobody has updated for years.

That's why we don't treat PHP as a one-off task. On every WordPress care plan, we keep WordPress, the theme and plugins updated, take daily backups and monitor security. Plugin conflict fixes are included too, so if an update clashes with something, sorting it out is part of the plan.

Keeping everything current every month is what makes a PHP upgrade boring. And boring is exactly what you want.

The other common mistake we see is assuming the host has it covered. Some do, some don't. Our fully managed WordPress hosting means hosting and care sit in one place, so there's no confusion about who does what.

Frequently asked questions

Will upgrading PHP break my website?

Usually not, especially if WordPress, your theme and plugins are up to date. The risk comes from old or abandoned plugins. Take a backup, test first if you can, and know how to switch back.

Can I skip straight from PHP 7.4 to PHP 8.3?

Yes, you can jump straight to the version you want. However, the bigger the jump, the more likely an old plugin is to struggle. Testing on a staging copy first is well worth it.

Should I use PHP 8.5 because it's the newest?

Not automatically. WordPress supports it, but your plugins and theme need to support it too. PHP 8.3 or 8.4 is a sensible choice for most small business sites today.

How often should I check my PHP version?

Once or twice a year is enough for most sites. A good time is the autumn, because PHP versions reach the end of their support on 31 December.

Does PHP affect my emails or domain?

No. PHP only affects how your website runs. Your domain name and email are separate, although they may be with the same company.

Want someone to handle it for you?

If you'd rather not touch your server settings, we can check your PHP version, test the upgrade and keep everything up to date from then on. Have a look at our care plans, or get in touch and tell us about your site.

We're based in West Yorkshire and look after WordPress websites for businesses across the UK.