News & advisories
Advisories, upgrade notes and what we are seeing in old PHP projects.
WordPress 7.0 "Armstrong", released on 20 May 2026, raised the minimum PHP version from 7.2.24 to 7.4, the first minimum-PHP increase since WordPress 6.6. PHP 8.3 remains the recommended minimum.
Read more →Laravel 13 shipped on 17 March 2026 with a first-party AI SDK, JSON:API resources and vector search, and it now requires PHP 8.3 or newer. Laravel 12 stopped receiving bug fixes on 13 August 2026.
Read more →In November 2025 Symfony shipped two releases at once: 7.4, the new long-term-support version, and 8.0, which requires PHP 8.4 or newer.
Read more →Laravel 12 arrived on 24 February 2025 as a maintenance-focused release with minimal breaking changes and new React, Vue and Livewire starter kits.
Read more →PHP 8.4, released on 21 November 2024, introduced property hooks, asymmetric visibility, the #[\Deprecated] attribute and new array helper functions.
Read more →PHP 8.1 stopped receiving security fixes on 31 December 2025. As PHP2Shell shows, unsupported branches now get no upstream patches for new vulnerabilities.
Read more →PHP 8.5 shipped on 20 November 2025 with the |> pipe operator, a built-in URI extension, clone-with syntax and the #[\NoDiscard] attribute.
Read more →Two critical PHP flaws dubbed "PHP2Shell" allow unauthenticated remote code execution on PHP installations serving web requests. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now; PHP 8.1 and older get no upstream fix.
Read more →