Many small business sites in Armenia still run on PHP 7.4 or 8.0 because “it works”. The PHP2Shell news shows why that is a problem: old branches no longer get regular security releases, so when a serious flaw appears, they are the last to be protected, or never protected at all.
How to check your PHP version
- In WordPress open Tools, then Site Health, then the Info tab, and expand the Server section. The PHP version is listed there.
- In your hosting control panel look for “PHP version”, “PHP configuration” or “Select PHP version”.
- Ask your hosting support, who can also tell you whether the latest security patches are applied.
Which version should you use
Use a PHP branch that still receives security fixes and that your plugins support. Today that means a current 8.x release that includes the October 2026 patches: 8.2.35, 8.3.36, 8.4.27 or 8.5.12 and newer. Check the compatibility notes of your theme and your most important plugins before choosing the newest branch, because a few older plugins lag behind.
How to upgrade safely
- Back up files and the database.
- Update WordPress core, the theme and all plugins first. Remove plugins you no longer use.
- If possible, test the new PHP version on a staging copy and watch for errors in the log.
- Switch the PHP version in the hosting panel during a quiet time for your business.
- Open the home page, the contact form, the checkout and the admin area, and clear the cache.
- If something breaks, switch back to the previous version and fix the incompatible plugin, then try again.
For an old site with a custom theme or abandoned plugins, an upgrade can take real developer time. It is still cheaper than recovering a hacked site.
Frequently asked questions
How often should I upgrade PHP?
Plan a review at least once a year. Each PHP branch has a support period, and when it ends you should already be on a newer one.
Can I upgrade PHP myself?
On most hosting plans, yes: it is a single setting in the control panel. The risky part is compatibility, so back up first and test the site afterwards.
My host does not offer a new PHP version. What now?
That is a warning sign. Ask support for a timeline, and if there is none, plan a move to a host that keeps PHP current.
Read next
- How to Fix PHP2Shell: Update PHP and Protect Your Website
- WordPress Updates, Backups and Vulnerability Monitoring: A Simple Routine
- WordPress Maintenance and Support: What Is Included and Why You Need It
Need help keeping your WordPress site secure? We offer maintenance, updates and security checks. Contact us
