PHP 8.3end of life
PHP 8.3 gets security fixes until 31 Dec 2027. The latest release is 8.3.36, from 21 Oct 2026.
Security fixes only
PHP 8.3 at a glance · status on , from php.net
- First release
- 23 Nov 2023
- Bug fixes until
- 31 Dec 2025
- Security fixes until
- 31 Dec 2027
- Latest release
- 8.3.36 · 21 Oct 2026
PHP2Shell
PHP 8.3.35 and older are affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619). PHP 8.3.36 fixes it. Check yours
Keeping PHP 8.3 up to date
01
Stay on the latest release
Update to the newest PHP 8.3 release. On shared hosting, ask your host; in Docker, pull the tag again and restart; on a server, install your distribution's PHP update.
02
Plan the next move
Move to PHP 8.5 before security support for 8.3 ends. Test your application and its extensions on it first.
Questions
When does PHP 8.3 reach end of life?
PHP 8.3 gets security fixes until 31 Dec 2027. Bug fixes ended on 31 Dec 2025. After 31 Dec 2027 it reaches end of life and gets no more fixes.
What is the latest PHP 8.3 release?
PHP 8.3.36, released on 21 Oct 2026.
Is PHP 8.3 affected by PHP2Shell?
PHP 8.3.35 and older are affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619). PHP 8.3.36 fixes it.
How do I check which PHP version a site runs?
Type its address into Arvion's PHP version check. It reads the X-Powered-By header PHP adds by default. If a site hides it, run php -v on the server, or in WordPress open Tools, then Site Health, then Info, and look under Server.
Other PHP versions
Supported now: PHP 8.5, 8.4, 8.3, 8.2.
Sources
The poster shows the PHP logo by Colin Viebrock, licensed CC BY-SA 4.0, painted into the artwork. PHP is not affiliated with Arvion.