CakePHP: versions, end of support and vulnerabilities
Release branches of CakePHP with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 11 vulnerabilities for CakePHP, 0 of them actively exploited. Last checked on 02/11/2026.
Release branches
CakePHP 5.4
Latest version: 5.4.4, released on 31/10/2026
End of support: no date known
No known vulnerability open in 5.4.4
CakePHP 5.3
Latest version: 5.3.8, released on 31/10/2026
End of support: no date known
No known vulnerability open in 5.3.8
CakePHP 5.2
Latest version: 5.2.16, released on 31/10/2026
End of support: no date known
No known vulnerability open in 5.2.16
CakePHP 4.6
Latest version: 4.6.6, released on 31/10/2026
End of support: no date known
No known vulnerability open in 4.6.6
CakePHP 5.1
Latest version: 5.1.10, released on 16/07/2026
End of support: 19/07/2026
No known vulnerability open in 5.1.10
CakePHP 4.5
Latest version: 4.5.12, released on 14/07/2026
End of support: 09/09/2026
No known vulnerability open in 4.5.12
CakePHP 5.0
Latest version: 5.0.11, released on 12/09/2024
End of support: 09/01/2026
No known vulnerability open in 5.0.11
CakePHP 4.4
Latest version: 4.4.18, released on 22/09/2023
End of support: 09/09/2026
No known vulnerability open in 4.4.18
CakePHP 4.2
Latest version: 4.2.12, released on 06/01/2023
End of support: 14/10/2023
No known vulnerability open in 4.2.12
CakePHP 4.3
Latest version: 4.3.11, released on 05/01/2023
End of support: 09/09/2026
No known vulnerability open in 4.3.11
CakePHP 3.10
Latest version: 3.10.5, released on 01/01/2023
End of support: 15/12/2022
No known vulnerability open in 3.10.5
CakePHP 3.9
Latest version: 3.9.10, released on 30/05/2021
End of support: no date known
No known vulnerability open in 3.9.10
CakePHP 2.10
Latest version: 2.10.24, released on 15/12/2020
End of support: 15/06/2021
2 known vulnerabilities open in 2.10.24
CakePHP 4.1
Latest version: 4.1.7, released on 12/12/2020
End of support: no date known
No known vulnerability open in 4.1.7
CakePHP 4.0
Latest version: 4.0.10, released on 07/12/2020
End of support: no date known
2 known vulnerabilities open in 4.0.10
CakePHP 3.8
Latest version: 3.8.13, released on 19/06/2020
End of support: no date known
No known vulnerability open in 3.8.13
CakePHP 3.7
Latest version: 3.7.9, released on 19/06/2019
End of support: no date known
No known vulnerability open in 3.7.9
CakePHP 3.6
Latest version: 3.6.15, released on 23/04/2019
End of support: no date known
No known vulnerability open in 3.6.15
CakePHP 3.5
Latest version: 3.5.18, released on 23/04/2019
End of support: no date known
No known vulnerability open in 3.5.18
CakePHP 3.4
Latest version: 3.4.14, released on 20/05/2018
End of support: no date known
No known vulnerability open in 3.4.14
CakePHP 2.9
Latest version: 2.9.9, released on 25/05/2017
End of support: no date known
2 known vulnerabilities open in 2.9.9
CakePHP 3.3
Latest version: 3.3.16, released on 06/04/2017
End of support: no date known
No known vulnerability open in 3.3.16
CakePHP 3.1
Latest version: 3.1.14, released on 25/11/2016
End of support: 13/02/2017
2 known vulnerabilities open in 3.1.14
CakePHP 3.0
Latest version: 3.0.19, released on 25/11/2016
End of support: no date known
2 known vulnerabilities open in 3.0.19
CakePHP 2.8
Latest version: 2.8.9, released on 18/09/2016
End of support: no date known
2 known vulnerabilities open in 2.8.9
CakePHP 3.2
Latest version: 3.2.14, released on 12/08/2016
End of support: no date known
1 known vulnerability open in 3.2.14
CakePHP 2.7
Latest version: 2.7.11, released on 13/03/2016
End of support: no date known
2 known vulnerabilities open in 2.7.11
CakePHP 2.6
Latest version: 2.6.13, released on 13/03/2016
End of support: no date known
2 known vulnerabilities open in 2.6.13
CakePHP 1.3
Latest version: 1.3.21, released on 31/10/2015
End of support: 01/11/2015
2 known vulnerabilities open in 1.3.21
CakePHP 2.5
Latest version: 2.5.9, released on 06/08/2015
End of support: no date known
3 known vulnerabilities open in 2.5.9
CakePHP 2.4
Latest version: 2.4.10, released on 17/05/2014
End of support: no date known
3 known vulnerabilities open in 2.4.10
CakePHP 2.3
Latest version: 2.3.10, released on 30/08/2013
End of support: no date known
3 known vulnerabilities open in 2.3.10
CakePHP 2.2
Latest version: 2.2.9, released on 17/07/2013
End of support: no date known
3 known vulnerabilities open in 2.2.9
CakePHP 2.1
Latest version: 2.1.5, released on 14/07/2012
End of support: no date known
3 known vulnerabilities open in 2.1.5
CakePHP 2.0
Latest version: 2.0.6, released on 05/02/2012
End of support: no date known
3 known vulnerabilities open in 2.0.6
Most recent vulnerabilities of CakePHP
- CVE-2026-55590, CVSS 4.0: 5.1, 09/07/2026
- CVE-2026-23643, CVSS 3.1: 5.4, 16/01/2026
- CVE-2023-22727, CVSS 3.1: 9.8, 17/01/2023
- CVE-2020-35239, CVSS 3.1: 8.8, 26/01/2021
- CVE-2019-11458, CVSS 3.0: 7.5, 08/05/2019
- CVE-2016-4793, CVSS 3.0: 7.5, 23/01/2017
- CVE-2015-8379, CVSS 3.0: 8.8, 26/01/2016
- CVE-2011-3712, CVSS 2.0: 5.0, 23/09/2011
- CVE-2010-4335, CVSS 2.0: 7.5, 14/01/2011
- CVE-2006-5031, CVSS 2.0: 5.0, 27/09/2006
Get notified
Add CakePHP with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add CakePHP