Which PHP version should WordPress use in 2026?
Short answer
In late 2026, a WordPress site should run PHP 8.3, 8.4 or 8.5, at a version that includes the October 2026 security fixes: 8.3.36, 8.4.27 or 8.5.12 or later. All three are supported by WordPress 7.x, and wordpress.org recommends 8.3 or greater. PHP 8.2 is acceptable only until 31 December 2026, and only from 8.2.35. PHP 8.1 and older no longer get security fixes, including for PHP2Shell. Among 8.3 to 8.5, take the newest one your plugins, theme and host support: it gets fixes the longest.
The short answer, version by version
| PHP | Patched for October 2026 from | Security fixes until | Verdict |
|---|---|---|---|
| 8.5 | 8.5.12 | 31 December 2029 | Good, if your site is ready |
| 8.4 | 8.4.27 | 31 December 2028 | Good |
| 8.3 | 8.3.36 | 31 December 2027 | Good, wordpress.org’s minimum recommendation |
| 8.2 | 8.2.35 | 31 December 2026 | Move on before January |
| 8.1, 8.0, 7.4 | no official release | ended | Upgrade now |
Sources: php.net supported versions and the security advisory of 21 October 2026.
What WordPress says
wordpress.org: “To run WordPress, it’s recommended your host supports: PHP version 8.3 or greater.” (wordpress.org) The core team’s compatibility table lists WordPress 7.0 and 7.1 as compatible with PHP 7.4 to 8.5; PHP 8.6 isn’t in it yet.
Why the patch number matters in 2026
Choosing a series (8.3, 8.4) is half of it. The other half is the patch: after 21 October 2026, a site on 8.4.26 is on a good series but exposed to two critical flaws. Check both in Tools → Site Health → Info → Server (how).
How to choose between 8.3, 8.4 and 8.5
- Check your plugins and theme for 8.5, 8.4 and 8.3. Each check takes one scan.
- Take the newest one that’s clean and that your host offers.
- If none is clean, fix the items marked “Will break” for the version you prefer, or settle on the newest one that is.
CompatNav, a free plugin on wordpress.org, checks for each of these versions on your own server and reports only what changes from the version you run today. What each version changes: PHP 8.3, PHP 8.4, PHP 8.5. The longer comparison, with every version’s changes: the best PHP version for WordPress.
Key takeaways
- Recommended: PHP 8.3, 8.4 or 8.5, patched (8.3.36, 8.4.27, 8.5.12 or later).
- PHP 8.2: until 31 December 2026, from 8.2.35.
- PHP 8.1 and older: no fixes, not even for the October 2026 flaws.
- Security fixes: 8.3 until end of 2027, 8.4 until end of 2028, 8.5 until end of 2029.
- The newest version your site is ready for is the best one; check before you switch.
Frequently asked questions
Is PHP 8.5 too new for WordPress?
WordPress itself supports it from 6.9. Whether your site does depends on your plugins and theme, so check them for 8.5 first.
What about PHP 8.6?
It’s in release candidates, with a release planned for 19 November 2026. Wait for it to be released and for WordPress to list it as compatible before using it on a live site.
Does a newer PHP version make WordPress faster?
It can, but measure it on your own site rather than relying on general claims. The reasons that don’t depend on your site are security fixes and support.
Check your own site before you upgrade
CompatNav is a free WordPress plugin. It reads the code of your plugins and themes on your own server and tells you, in plain words, what will break and what will only show notices on the PHP version you choose. It never changes your code. It can’t see problems that only appear while code runs with real data, so a quick check of your site after the upgrade still matters.
Sources
- php.net: Supported Versions
- php.net: Security advisory, 21 October 2026
- make.wordpress.org: PHP Compatibility and WordPress Versions
- wordpress.org: Requirements
About the code examples: each output is the real output of the code shown, run with the official PHP builds, without a php.ini, with all errors reported and displayed. Only the file path was replaced by a neutral server path.