PHP Version in TYPO3 – Glossary
TYPO3 PHP Version
The PHP version is the release of the PHP language that your TYPO3 website runs on. Each TYPO3 version accepts only certain PHP versions. The PHP version decides speed, security and support for your site. Updated: 26 October 2026.
Why the PHP version matters
- Security: Only supported PHP branches receive security fixes. If you run an ended version, flaws such as PHP2Shell are no longer fixed officially.
- Compatibility: TYPO3 and extensions run only on the PHP versions they list. A wrong version causes errors or outages.
- Performance: Newer PHP versions usually handle requests faster and use less memory.
Which PHP version fits which TYPO3 version?
The table shows the minimum PHP version per TYPO3 version and our recommendation. Always check the release notes of your patch level.
TYPO3 version | Minimum PHP | Recommendation (26 Oct 2026) | Status |
TYPO3 v14 LTS | 8.2 | PHP 8.4 or 8.5, patched | Current LTS version |
TYPO3 v13 LTS | 8.2 | PHP 8.3 or 8.4, patched | LTS version |
8.1 | Move to PHP 8.2 or 8.3 | ELTS only | |
TYPO3 v11 | 7.4 | Use a backport, plan an upgrade | ELTS only |
TYPO3 v10 and older | 7.2 | No supported PHP version left | No support |
Which PHP branches are supported?
PHP branch | Support status on 26 Oct 2026 | Safe against PHP2Shell from |
PHP 8.5 | Actively supported | 8.5.12 |
PHP 8.4 | Actively supported | 8.4.27 |
PHP 8.3 | Security fixes only, until 31 Dec 2027 | 8.3.36 |
PHP 8.2 | Security fixes only, until 31 Dec 2026 | 8.2.35 |
PHP 8.1 and older | Support ended (8.1 since 31 Dec 2025) | No official fix |
Current: PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
On 21 October 2026 the PHP project fixed two critical flaws known as PHP2Shell. Attackers can run code without logging in on servers that use PHP for web requests. TYPO3 itself needs no code fix, but every TYPO3 instance inherits the risk of its PHP version. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart every PHP worker afterwards. Details, timeline and help are in our article PHP2Shell: affected versions, patches and protection. Check your version in a few seconds with the checker:
Update the PHP version
- Check compatibility: Use the table above. Check your extensions too.
- Back up: Save files and database.
- Test: Apply the PHP update on a staging environment first.
- Update PHP: Install the patched version through your host or distribution and restart PHP-FPM and the web server.
- Verify the live version: See the active version in the TYPO3 backend under Admin Tools › Environment.
Conclusion
A supported, patched PHP version is the base of a secure TYPO3 website. If your TYPO3 version does not allow a current PHP version, the TYPO3 Upgrade Service helps. A TYPO3 maintenance contract keeps updates running. Find your TYPO3 version with the free TYPO3 Version Check.