PHP 8.2 reaches the end of security support on December 31, 2026. For a WordPress site owner, that makes November a good time to inventory servers and test a move to a supported PHP branch rather than waiting for a holiday emergency.
The right approach is not to click the newest version on a production server and hope. Compatibility testing, current backups, a rollback plan and careful monitoring reduce the chance of turning a security improvement into downtime.
Find every site still on PHP 8.2
A hosting account may contain forgotten subdomains, staging sites and cron jobs.
Record the PHP version for each application and the owner responsible for it.
Do not assume every site uses the version shown in the main control panel.
Check plugin and theme compatibility
Old plugins and custom code can fail when PHP changes.
Review vendor requirements, changelogs and error logs before choosing a target version. Our WordPress staging guide adds context.
A plugin marked compatible is not a substitute for testing your own workflows.
Make a complete backup
A safe upgrade needs files, database and configuration data.
Take a current backup and verify that it can be restored to a test environment.
Do not rely on a backup that has never been opened.
Use staging for a realistic test
Staging should mirror the production PHP configuration, plugins and critical settings.
Test login, forms, search, checkout, email and scheduled tasks. Our disaster recovery plan adds context.
A homepage that loads does not prove the whole site works.
Review error logs
Deprecation notices and fatal errors can reveal code that needs attention.
Compare logs before and after the PHP change and fix repeatable failures. For a related perspective, read October PHP security checklist.
Do not hide errors by suppressing logging permanently.
Schedule a controlled change window
A quiet period gives the team time to monitor and reverse the change.
Notify stakeholders, set a rollback point and keep access to the host control panel. The PHP’s 2026 release and support notices offers primary-source detail.
Avoid major changes during a store’s busiest sales hour.
Verify background work
WordPress relies on scheduled tasks for publishing, orders and maintenance.
Check cron, email queues, payment callbacks and API connections after migration. Our managed hosting comparison adds context.
Do not stop at a successful front-end page load.
Document the new baseline
Record the chosen PHP version, extensions, settings and test results.
Schedule the next compatibility review and remove obsolete staging copies.
Do not leave unsupported PHP versions running on forgotten sites.
The next sensible step
Start with the most important check, make a short record of the result and change one thing at a time. A clear routine is easier to repeat, easier to explain and less likely to leave a costly detail overlooked.
Frequently asked questions
Why is December 31 important?
PHP 8.2 reaches the end of its security-support window on December 31, 2026. After that, newly discovered vulnerabilities in the branch will not receive normal upstream security fixes. A host may continue to run the version, but that does not make it a safe long-term choice. Site owners should plan a move to a supported PHP branch and verify application compatibility rather than waiting for the deadline.
Which PHP version should I choose?
Choose a currently supported version that is compatible with your WordPress core, theme, plugins and custom code. The newest branch is not always the best immediate choice for an older production site. Review official support windows and vendor requirements, then test the candidate in staging. Document the version and extensions used. A controlled upgrade is more valuable than selecting a number without checking what the application needs.
What is the most common upgrade failure?
A custom plugin or old theme may call a removed function, rely on changed behaviour or produce a fatal error. The homepage may still load while checkout, forms or background jobs fail. Test the actual business workflows in staging, not just a few pages. Review PHP error logs and browser console output. Keep a rollback path ready before making the production switch.
Do I need a database backup?
Yes. WordPress content, users, settings and many plugin records live in the database. A file-only backup cannot restore the whole site. Take a consistent backup of both files and database, then test restoration in an isolated environment. Record the backup date and storage location. Do not assume that a hosting dashboard saying ‘backup complete’ proves the archive is usable.
How should I handle WooCommerce?
Test the complete purchase journey in staging with safe test payment methods. Include product variations, cart, checkout, tax and shipping calculations, order emails and payment callbacks. Check subscriptions and scheduled actions if the store uses them. A successful front page is not enough. Schedule the production change for a low-traffic window and monitor orders closely afterward.
What about cron and scheduled publishing?
Background tasks can fail quietly after a PHP change. Check WP-Cron or server cron configuration, scheduled posts, email queues and maintenance jobs. Trigger safe tests where possible and review logs for errors. If the site uses a real server cron job, confirm the command points to the intended PHP binary. A site can appear healthy while important automation is broken.
How long should I monitor after the change?
Monitor closely through the first business cycle, including checkout, forms, scheduled jobs and daily backups. Keep the previous PHP configuration and rollback instructions available until you are confident. Review error logs again after real traffic reaches the site. Record any fixes so the next update is easier. A successful migration is one that stays reliable after the administrator stops watching the screen.

