Poster of a procession of riveted steel elephants: a new one with the PHP logo painted on its flank leads, older ones follow, and a robot crane takes the oldest apart under a large clock. A sign on the wall reads Arvion.

PHP 8.5end of life

PHP 8.5 gets security fixes until 31 Dec 2029. The latest release is 8.5.12, from 21 Oct 2026.

Supported

PHP 8.5 at a glance · status on , from php.net

First release
20 Nov 2025
Bug fixes until
31 Dec 2027
Security fixes until
31 Dec 2029
Latest release
8.5.12 · 21 Oct 2026

PHP2Shell

PHP 8.5.11 and older are affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619). PHP 8.5.12 fixes it. Check yours

Which PHP does a site run?

Type its address and see its version and support dates.

Check a site

Keeping PHP 8.5 up to date

  1. 01

    Stay on the latest release

    Update to the newest PHP 8.5 release. On shared hosting, ask your host; in Docker, pull the tag again and restart; on a server, install your distribution's PHP update.

  2. 02

    Check your sites

    Use the PHP version check to confirm each site reports the latest PHP 8.5 release.

Questions

When does PHP 8.5 reach end of life?

PHP 8.5 gets security fixes until 31 Dec 2029. Bug fixes continue until 31 Dec 2027. After 31 Dec 2029 it reaches end of life and gets no more fixes.

What is the latest PHP 8.5 release?

PHP 8.5.12, released on 21 Oct 2026.

Is PHP 8.5 affected by PHP2Shell?

PHP 8.5.11 and older are affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619). PHP 8.5.12 fixes it.

How do I check which PHP version a site runs?

Type its address into Arvion's PHP version check. It reads the X-Powered-By header PHP adds by default. If a site hides it, run php -v on the server, or in WordPress open Tools, then Site Health, then Info, and look under Server.

Other PHP versions

Supported now: PHP 8.5, 8.4, 8.3, 8.2.

Sources

The poster shows the PHP logo by Colin Viebrock, licensed CC BY-SA 4.0, painted into the artwork. PHP is not affiliated with Arvion.

Is PHP spread across your repositories?

Your repositories pin PHP in Dockerfiles, compose files, CI images and composer.json. Book a few minutes with the Arvion team to go through them.

Book a few minutes