PHP: versions, end of support and vulnerabilities
Release branches of PHP with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 760 vulnerabilities for PHP, 5 of them actively exploited. Last checked on 03/11/2026.
Known vulnerabilities in PHP
- PHP2Shell (CVE-2026-109618, CVE-2026-109619)
Release branches
PHP 8.5
Latest version: 8.5.12, released on 21/10/2026
End of support: 31/12/2029
No known vulnerability open in 8.5.12
PHP 8.4
Latest version: 8.4.27, released on 21/10/2026
End of support: 31/12/2028
No known vulnerability open in 8.4.27
PHP 8.3
Latest version: 8.3.36, released on 21/10/2026
End of support: 31/12/2027
No known vulnerability open in 8.3.36
PHP 8.2
Latest version: 8.2.35, released on 21/10/2026
End of support: 31/12/2026
No known vulnerability open in 8.2.35
PHP 8.1
Latest version: 8.1.34, released on 18/12/2025
End of support: 31/12/2025
2 known vulnerabilities open in 8.1.34
PHP 8.0
Latest version: 8.0.30, released on 03/08/2023
End of support: 26/11/2023
4 known vulnerabilities open in 8.0.30
PHP 7.4
Latest version: 7.4.33, released on 03/11/2022
End of support: 28/11/2022
5 known vulnerabilities open in 7.4.33
PHP 7.3
Latest version: 7.3.33, released on 18/11/2021
End of support: 06/12/2021
9 known vulnerabilities open in 7.3.33
PHP 7.2
Latest version: 7.2.34, released on 01/10/2020
End of support: 30/11/2020
7 known vulnerabilities open in 7.2.34
PHP 7.1
Latest version: 7.1.33, released on 24/10/2019
End of support: 01/12/2019
6 known vulnerabilities open in 7.1.33
PHP 7.0
Latest version: 7.0.33, released on 10/01/2019
End of support: 10/01/2019
25 known vulnerabilities open in 7.0.33
PHP 5.6
Latest version: 5.6.40, released on 10/01/2019
End of support: 31/12/2018
17 known vulnerabilities open in 5.6.40
PHP 5.5
Latest version: 5.5.38, released on 21/07/2016
End of support: 21/07/2016
78 known vulnerabilities open in 5.5.38
PHP 5.4
Latest version: 5.4.45, released on 03/09/2015
End of support: 14/09/2015
129 known vulnerabilities open in 5.4.45
PHP 5.3
Latest version: 5.3.29, released on 14/08/2014
End of support: 14/08/2014
188 known vulnerabilities open in 5.3.29
PHP 5.2
Latest version: 5.2.17, released on 06/01/2011
End of support: 06/01/2011
246 known vulnerabilities open in 5.2.17
PHP 4.4
Latest version: 4.4.9, released on 07/08/2008
End of support: 07/08/2008
305 known vulnerabilities open in 4.4.9
PHP 5.1
Latest version: 5.1.6, released on 24/08/2006
End of support: 24/08/2006
356 known vulnerabilities open in 5.1.6
PHP 5.0
Latest version: 5.0.5, released on 05/09/2005
End of support: 05/09/2005
372 known vulnerabilities open in 5.0.5
PHP 4.3
Latest version: 4.3.11, released on 31/03/2005
End of support: 31/03/2005
376 known vulnerabilities open in 4.3.11
PHP 4.2
Latest version: 4.2.3, released on 06/09/2002
End of support: 06/09/2002
393 known vulnerabilities open in 4.2.3
PHP 4.1
Latest version: 4.1.2, released on 12/03/2002
End of support: 12/03/2002
398 known vulnerabilities open in 4.1.2
PHP 4.0
Latest version: 4.0.6, released on 23/06/2001
End of support: 23/06/2001
398 known vulnerabilities open in 4.0.6
Most recent vulnerabilities of PHP
- CVE-2026-109619, CVSS 4.0: 9.2, actively exploited, 21/10/2026
- CVE-2026-109618, CVSS 4.0: 9.2, actively exploited, 21/10/2026
- CVE-2026-92842, CVSS 3.1: 5.9, 25/09/2026
- CVE-2026-91768, CVSS 3.1: 6.5, 25/09/2026
- CVE-2026-91769, CVSS 3.1: 4.3, 25/09/2026
- CVE-2026-91767, CVSS 3.1: 6.5, 25/09/2026
- CVE-2026-91766, CVSS 3.1: 5.9, 25/09/2026
- CVE-2026-91765, CVSS 3.1: 7.5, 25/09/2026
- CVE-2026-6103, CVSS 3.1: 3.3, 25/09/2026
- CVE-2026-17545, CVSS 4.0: 6.9, 25/09/2026
Get notified
Add PHP with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add PHP