PHP is the foundation of most websites: WordPress, Shopware, TYPO3, Joomla and countless other systems are built on it. As with any software, each version is only maintained for a limited time. After that, newly discovered security vulnerabilities are no longer fixed. At the end of 2026, this will be the case for PHP 8.2. A good reason to check your own website.
How long a PHP version is maintained
Each PHP version receives two years of active support with bug fixes, followed by two more years of security updates. Support always ends on 31 December. As of October 2026, this results in:
- PHP 8.5 (since November 2025): active support until the end of 2027, security updates until the end of 2029.
- PHP 8.4 (since November 2024): active support until the end of 2026, security updates until the end of 2028.
- PHP 8.3 (since November 2023): security updates only, until the end of 2027.
- PHP 8.2 (since December 2022): security updates only, until 31 December 2026.
- PHP 8.1 and older: no longer supported. PHP 8.1 has not received updates since the end of 2025, PHP 7.4 since the end of 2022.
The PHP project publishes the current overview at php.net/supported-versions.php.
Why outdated PHP is a risk
- Open security vulnerabilities: if a vulnerability becomes known in a version that is no longer maintained, it remains open there permanently. Attackers specifically look for websites with outdated software.
- No updates for CMS and plugins: current versions of WordPress, Shopware, TYPO3 and many extensions require newer PHP versions. If you stay on an old PHP version, at some point you will no longer be able to update the system itself either and will accumulate further vulnerabilities.
- Poorer performance: newer PHP versions work more efficiently. Pages load faster, and the server can handle more visitors.
- Data protection: Art. 32 GDPR requires protective measures in line with the state of the art. Software without security updates is hard to reconcile with this.
You can read more about the dangers of outdated software in our article Outdated software versions: a bigger danger than many think.
PHP versions at SpeedIT
PHP 7.4 to PHP 8.5 are available on our web servers. You choose the version yourself for each domain in the KeyHelp Control Panel. We continue to support PHP 7.4 so that you can upgrade at your own pace. However, support may be dropped in the course of server and security updates. We will inform you in good time. You can find the current list in our article Which PHP versions does SpeedIT Solutions support?
How to upgrade safely
1. Take stock
Check which PHP version your website currently uses and note the versions of your CMS, theme and plugins or extensions. Most vendors state which PHP versions their software has been tested with. WordPress also shows notes on the PHP version under Tools and Site Health.
2. Create a backup
Back up your files and database before every upgrade. The guide Creating and restoring manual backups shows how this works in our hosting.
3. Update first, then upgrade
Bring your CMS, theme and plugins up to date while the old PHP version is still running. Many compatibility issues have long been fixed in current versions. Extensions that have not been maintained for years are a warning sign. It is better to look for a replacement.
4. Test on a copy
The safest way to test the new version is on a copy of your website, for example on a test subdomain. If you maintain your own code, you can check it for problems in advance with tools such as PHPCompatibility for PHP_CodeSniffer.
5. Switch the version
You change your domain's PHP version in the KeyHelp Control Panel. Important: cron jobs, Composer and command line commands may use their own PHP version. Our article Using different PHP versions via SSH shows you how to select the right version there.
6. Check thoroughly
Afterwards, open the most important pages, test forms, search, shopping cart and checkout, sign in to the backend and take a look at the error log. Notices about deprecated features are not errors yet, but they show what will cause problems with the next version jump.
7. Roll back if there are problems
If something does not work, switch back to the previous version and fix the cause calmly. You can repeat the upgrade at any time.
Take extra care when moving from PHP 7 to PHP 8
If you are still using PHP 7.4, you face the biggest step. PHP 8.0 removed functions such as each() and create_function(), comparisons between numbers and strings work differently, and many errors that used to be mere warnings now stop execution. Since PHP 8.2, dynamically created properties in classes have also been deprecated. With older themes and self-developed extensions, a particularly careful test is therefore worthwhile.
Which version should you choose?
If your system and extensions support it, switch directly to PHP 8.4 or 8.5. That gives you peace of mind for years. If individual plugins are not ready yet, PHP 8.3 is a good intermediate step with security updates until the end of 2027.
Conclusion
A current PHP version is one of the simplest and most effective contributions to the security of your website. If you are still using PHP 8.2 or older, you should plan the upgrade now and not wait until the last day. With a backup, updates and a test on a copy, the switch usually goes smoothly. And if you need support along the way, our support team will be happy to help.
