End-of-life software and patch debt, explained
Short answer: software reaches end of life (EOL) when its maker stops shipping fixes, including security fixes. Patch debt is the gap between what you run and what is still supported and patched. Both pile up quietly until a critical flaw makes them urgent, as the PHP security releases of Oct 21, 2026 did.[1][2]
This hub explains, with sources, what is end-of-life now, what to do about it, and how to find the rest before it finds you. It is written for site owners, IT leads and the people who answer to them.
Start here: is your PHP site patched?
PHP fixed two critical remote code execution flaws on Oct 21, 2026. The fixed versions are 8.5.12, 8.4.27, 8.3.36 or 8.2.35.[2] If your site runs PHP:
- Check which PHP version you run.
- Use the free PHP Patch Check to see what version your own site announces (you prove you own the domain first).
- Read PHP end-of-life dates and what to do now.
Guides
PHP end-of-life dates and the October 2026 security releases
Which PHP versions are supported, which are end-of-life, and the steps to take now.
How to update PHP on WordPress safely
Backup, compatibility check, switch, verify, and how to roll back.
How to check your PHP version
Five ways, from the WordPress dashboard to the command line.
End-of-life software: risks and a checklist
What EOL means, why it is risky, and a step-by-step plan.
Tech debt remediation and audit
How to assess technical debt and fix it in a sensible order.
Free tools
PHP Patch Check
Free, owner-verified check of the PHP version your site announces, with a plain answer on the October 2026 fixes.
ModelEOL
Retirement dates, Regions and prices for AI models on Amazon Bedrock, so model deprecations don't surprise you.
Who is behind this?
EOL Hub is written by Keith Motte, founder of Topofmind.AI (Top Of Mind Technologies L.L.C.). Keith joined AWS as a Technical Account Manager in 2018. From May 2019 to Feb 2026 he was an AWS Enterprise Support Manager for Healthcare and Life Sciences customers, leading a team of 14 Technical Account Managers. He is now retired from AWS.
Every date and version on this site links to its primary source, such as php.net, WordPress.org, CISA or the UK's National Cyber Security Centre (NCSC). If a fact can't be confirmed from a primary source, it isn't here. EOL Hub is independent and is not affiliated with the PHP project, WordPress or AWS.
Frequently asked questions
What does end of life (EOL) mean for software?
It means the maker no longer releases updates for that version, including security fixes. CISA recommends retiring all end-of-life products.
What is patch debt?
Patch debt is the backlog of updates and upgrades you have not applied yet, including software that has reached end of life. It is one form of technical debt.
Which PHP versions are supported right now?
As of Oct 24, 2026, php.net lists PHP 8.2, 8.3, 8.4 and 8.5 as supported. PHP 8.2 security support ends on Dec 31, 2026.
Does EOL Hub collect my data?
No. This site sets no cookies, runs no analytics and has no sign-up form.