How to Update Your PHP Version in WordPress (the RIGHT Way)

Updating PHP is usually a routine task that can wait a few weeks. Right now, it can’t.

The PHP team has released emergency fixes for two critical security flaws that let attackers run code on your web server. If your WordPress site hasn’t been patched yet, it’s at risk.

In this article, we’ll explain which PHP versions are safe and what to do right now. Then we’ll show you how to check your PHP version and update it on the most popular WordPress hosting providers.

URGENT: Critical PHP Security Fix Released (October 2026)

On October 21, 2026, the PHP security team released emergency fixes for two critical vulnerabilities in PHP itself, CVE-2026-109618 and CVE-2026-109619.

These flaws let attackers run code on your web server without logging in. Details of the flaws also leaked before the fix was ready, so attackers may already know how to use them.

If your WordPress site is running an unpatched version of PHP, then you need to update it right away. The patched releases are:

• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35

If you’re on PHP 8.1 or older, your version no longer gets regular security updates, so you’ll need to upgrade to one of the versions above.

Updating WordPress won’t fix this. Updating WordPress core, plugins, or themes doesn’t change your PHP version. PHP runs on your hosting server, so the update happens in your hosting account or through your hosting provider.

Here’s what we recommend doing right now:

1. Check your PHP version. We’ll show you how in the next section. It only takes a few clicks.
2. Back up your site before you make any changes.
3. Update to a patched version. You can usually switch PHP versions from your hosting dashboard, and we’ll show you the steps for popular hosting providers below. If you can’t find the setting, ask your host to update you to a patched release.
4. Check for signs of a break-in. Updating stops new attacks, but it won’t remove a hacker who’s already in. Look for admin users you don’t recognize and files that changed unexpectedly. Our guide to fixing a hacked WordPress site shows you what to look for.

Even after this fix, it’s smart to keep your site on a supported version of PHP. New PHP versions fix security vulnerabilities and bugs, which protects your site against malware and hackers. They also make your site faster and use less memory.

If you use an older PHP version, your website may be less secure, slower, and more likely to show errors because of compatibility issues with WordPress core, plugins, or themes. You can learn more in our article about how PHP updates by your web host impact WordPress.

With that in mind, let’s look at how you can check your current PHP version in WordPress. We’ll also show you step by step how to update your PHP version with different hosting providers.

How to Check Your Current PHP Version in WordPress

WordPress makes it easy to check the version of PHP used by your host. What you need to do is log in to your admin dashboard and head to the Tools » Site Health page.

Then, switch to the ‘Info’ tab.

Next, you need to scroll down a little and click to expand the ‘Server’ tab. This section shows your server’s system information, including its PHP version.

In the screenshot, our demo website uses PHP 8.1. That version no longer gets security updates, so it needs to be upgraded.

Make sure you look at the full version number. To be protected from the October 2026 security flaws, your site needs to show PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35, or a later release in the same series.

If you see a lower number in the same series, such as 8.3.30, then the security fix hasn’t been applied to your site yet.

What to Do Before Updating PHP in WordPress

As with any updates, you want to make sure your live site won’t experience any errors before making the changes official. For this reason, you need to do the following before updating your PHP version:

• Update WordPress core, themes, and plugins – Doing this can ensure they can operate effectively with the new PHP. Must-have WordPress plugins from reputable developers will usually be readily compatible with newer versions of PHP.
• Back up your website – Use a backup plugin like Duplicator to create a website backup in case of issues. You can easily restore your site to an error-free version if disaster strikes.
• Create a staging site – We recommend trying to update your PHP in a staging environment so that any errors caused by the new PHP version won’t affect your live site.
• Check your plugins’ and themes’ PHP requirements – Each plugin page on WordPress.org lists the minimum PHP version it needs. For premium plugins and themes, check the developer’s documentation or changelog.

If you’re only moving to the patched release of the PHP series you already use, such as from 8.3.30 to 8.3.36, then the risk of breaking your site is low. These releases fix bugs and security flaws without adding new features. In that case, back up your site and update right away.

A staging site matters most when you’re moving to a new series, like from PHP 8.1 to PHP 8.4.

Also, keep in mind that most hosting dashboards let you choose a PHP series like 8.3 or 8.4, not an exact release. Your hosting provider installs the latest patch for that series. After switching, check the Site Health page again to confirm that you’re on a patched release.

How to Update Your PHP Version in Bluehost

First, you need to log in to your Bluehost hosting account’s control panel and click on the ‘Websites’ tab in the left column.

After that, select the website whose PHP version you’d like to update, and click the ‘Settings’ button.

Now, go ahead and switch to the ‘Settings’ tab.

This is where you can see and configure the advanced settings of your WordPress blog or website.

What you need to do now is scroll down to the PHP Version section.

After that, click ‘Change’ next to your current PHP version.

Now, go ahead and select the PHP version you want to update to. Then, simply click the ‘Change’ button.

Bluehost will now start using the selected PHP version for your website.

How to Update Your PHP Version in Hostinger

First, log in to your Hostinger account dashboard and switch to the ‘Websites’ tab.

From here, you need to click the ‘Manage’ button next to the website where you want to change the PHP version.

This will take you to that particular website’s dashboard.

Next, locate the ‘PHP Configuration’ tab under the Advanced menu from the left sidebar.

Hostinger will now show you available and supported PHP versions to choose from.

Select the PHP version you want to use and click the ‘Update’ button to save your settings.

A popup will appear asking you to confirm your website, blog, or online store’s PHP update.

Simply click ‘Confirm’ to continue.

How to Update Your PHP Version in SiteGround

If you are using SiteGround, then here is how you will update the PHP version of your WordPress website.

First, you need to log in to your SiteGround account dashboard.

After that, go to the ‘My websites and services’ section and click the ‘Manage’ button inside Websites.

You will now arrive at the My Websites page.

Just click on the ‘Site Tools’ button under the website you want to update the PHP version in.

Next, you need to select the ‘PHP Manager’ menu inside the ‘Devs’ section from the left column.

From here, you can scroll down to the PHP Version tab and click the pencil button next to your PHP version.

This will bring up a popup. You first need to select ‘Change PHP version manually’ under the ‘Set PHP Version’ option.

After that, you will be able to select your PHP version from a dropdown menu.

Don’t forget to click on the ‘Confirm’ button to apply your changes.

How to Update Your PHP Version in HostGator

What you need to do first is log in to your HostGator hosting account dashboard and click on the ‘Websites’ section.

After that, click the ‘Settings’ button on the website whose PHP version you want to update.

Next, simply switch to the ‘Settings’ tab.

In this section, you can manage your website’s advanced settings.

At this stage, just scroll down to the PHP Version section.

Then, click ‘Change’ next to your current PHP version.

You will see a popup asking you to select the PHP version you want to update to.

Once you’ve made your choice, just click the ‘Change’ button.

How to Update Your PHP Version in DreamHost

If you are a DreamHost user, you need to log in to your hosting account’s control panel. After that, navigate to the ‘Manage Websites’ tab from the left-side panel.

On the list of websites, just click the three-dot menu and choose ‘PHP Version.’

You will be directed to the PHP settings page inside the control panel.

Go ahead and choose a PHP version from the dropdown menu. Then, click ‘Change PHP Version’ to continue with the update.

How to Update Your PHP Version in WP Engine

WP Engine is a managed WordPress hosting company, which means they automatically upgrade the PHP version for you. However, you can also manually upgrade and downgrade the PHP version for your websites.

Simply log in to your WP Engine dashboard. On the ‘My Sites’ page, click on the PHP version next to your selected website.

This will bring you to your website’s Overview settings. Here, WP Engine has a feature where you can preview your website on the latest PHP version without actually changing the PHP version.

If you want to try it out, go ahead and click ‘Preview PHP …’

To actually update PHP in WP Engine, scroll down to the ‘Updates’ section.

Then, click on the PHP version number link.

Now, just choose the ‘Upgrade to PHP … ‘ option.

After that, click on the ‘Confirm’ button.

How to Update Your PHP Version in Other WordPress Hosting Providers

Most WordPress hosting providers organize their settings in a more or less similar way. You will most likely find the option to change a PHP version in the advanced settings of your cPanel or any other hosting control panel.

If you cannot find it, then you can check your provider’s knowledge base or contact their support team to change the PHP version of your website. If you can’t update right away, ask them to apply the security fix for you. For more information, you can check out our article on how to ask for WordPress support.

Changing PHP Versions in WordPress: Frequently Asked Questions

Now that we’ve discussed how to update your PHP version in WordPress, let’s cover some frequently asked questions about the topic.

What should you do after updating the PHP version?

After updating the PHP version for your WordPress website, you may want to ensure that everything is working as expected. We recommend visiting your website to see if there are any immediately noticeable issues.

After that, you can log in to the WordPress admin area of your website. Ensure your website uses the latest version of WordPress and all your plugins and themes are updated.

See our beginner’s guide on how to safely update WordPress for more information.

What do I do if a PHP update breaks my WordPress website?

It is unlikely that a PHP update will break a WordPress site. However, with the abundance of free and premium plugins, there is still a chance that a single line of poor code can result in any of the common WordPress errors.

First, you must ensure it is not a plugin or theme causing this error. To do that, you need to deactivate all your WordPress plugins and switch to a default WordPress theme.

If this does not solve your issue, then contact your web host’s support team. There is a good chance that the issue you are facing will already be on their radar, and they will be able to assist you.

If your web host is unable to help you out, then you can switch to a different PHP version using the methods described above. Just make sure it’s a patched release that still gets security updates. Switching back to an unpatched version leaves your site open to attacks.

Will updating WordPress update my PHP version?

No. Updating WordPress core, plugins, or themes doesn’t change your PHP version. PHP runs on your hosting server, so you need to update it in your hosting account or ask your hosting provider to do it for you.

How do I know if my site was hacked before I updated PHP?

Updating PHP stops new attacks, but it won’t remove a hacker who’s already in. Check your Users page for admin accounts you don’t recognize, and ask your host whether any files changed unexpectedly.

Hackers often leave hidden files behind so they can get back in later. For details, see our guide on how to find a backdoor in a hacked WordPress site.

We hope this article helped you learn how to update the PHP version of your WordPress site. You may also want to see our list of the fastest WordPress hosting providers on the market or our ultimate WordPress SEO guide to boost your search engine rankings.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.