PHP 8.2 Ends December 31: What Therapists With WordPress Sites Need to Check Now

Most therapists don't know which version of PHP their website runs on. That's normal. You didn't open a practice to babysit a web server.

But there's a date coming up that's worth five minutes of your attention before the holidays take over. On December 31, 2026, PHP 8.2 stops getting security fixes. If your practice website runs on WordPress, there's a decent chance it's on 8.2 or something even older.

This post walks you through what that means, how to check your own site, and how to upgrade without breaking the contact form your new clients use to reach you.

What PHP is, and why it matters to your practice

WordPress is built on a programming language called PHP. Every time someone lands on your homepage, reads your "About" page or fills in your contact form, PHP is running on your hosting server to build that page.

Like any software, PHP comes in versions. Each version gets security fixes for a set period, and then the people who maintain PHP stop patching it. According to php.net (opens in a new tab), PHP 8.2 gets its last security fixes on December 31, 2026. After that, if someone finds a new security hole in 8.2, nobody will fix it.

And this isn't a rare situation. WordPress.org's own usage stats from late September 2026 show that roughly six in ten WordPress sites that report their version run PHP 8.2 or older. Plenty of those are on 7.4 or 8.1, which already stopped getting fixes.

Will my website stop working on January 1?

No. Your site won't go dark at midnight on New Year's Eve. It'll keep loading exactly as it does today.

The risk is quieter than that. From January onward, your site sits on software that no longer gets patched. Each new weakness that's found and published stays open on your site for good. That's the kind of gap attackers look for, and it's exactly how the problems we wrote about in our PHP2Shell post get in.

For a therapy practice, a hacked site isn't just embarrassing. It can mean spam pages showing up in Google under your name, a browser warning that scares off a potential client, or a contact form quietly sending inquiries somewhere they shouldn't go. People reaching out to a therapist are often doing it on a hard day. The last thing they need is a warning screen.

Does this affect me if I'm on Squarespace or Wix?

Probably not. Hosted builders like Squarespace and Wix run the servers for you, so you don't manage PHP at all. This is mainly a WordPress issue, because with WordPress your hosting company (or you) controls the server settings.

If you're not sure what your site is built on, ask whoever built it, or check your hosting account. If you log in to something at yourwebsite.com/wp-admin, you're on WordPress.

How to check your PHP version in about two minutes

There are two easy ways.

From your WordPress dashboard. Log in, go to Tools, then Site Health. Click the Info tab and open the Server section. You'll see a line that says "PHP version." If it starts with 8.2, 8.1, 8.0 or 7.something, you need to act before December 31.

From your hosting account. Most hosts show the PHP version in the control panel, often under something like "PHP Settings," "Select PHP Version" or "MultiPHP Manager." Some hosts will move you to a newer version on their own schedule and some won't, so it's worth asking yours directly.

If you see 8.3 or higher, you're fine for now. WordPress.org (opens in a new tab) recommends PHP 8.3 or newer, and per php.net, 8.3 is covered until the end of 2027, 8.4 until the end of 2028 and 8.5 until the end of 2029.

How to upgrade without breaking your site

Changing the PHP version is usually one click in your hosting panel. The click isn't the hard part. The hard part is that older plugins and themes sometimes don't work on newer PHP, and the result can be a blank white page or a contact form that silently stops sending.

Here's the order we follow on client sites:

1. Take a full backup first. Files and database, stored somewhere other than the server itself. If your host has a one-click backup, use it, and make sure you know how to restore it.
2. Update everything else before PHP. Update WordPress, your theme and every plugin. Delete plugins you don't use anymore. Old, abandoned plugins are the most common thing that breaks.
3. Test on a staging copy if you can. Many hosts offer a staging site, a private copy of your site where you can try the new PHP version without risk.
4. Switch to PHP 8.3 or 8.4. Make the change in your hosting panel.
5. Click through the pages that matter. Your homepage, your services pages, your contact page and your booking link. Then send yourself a test message through the contact form and make sure it actually arrives.
6. Know how to roll back. If something breaks and you can't fix it quickly, switch the PHP version back, restore your backup, and get help.

The whole job usually takes less than an hour on a healthy site. On a site that hasn't been updated in a couple of years, it can take longer, because the PHP change tends to expose every outdated plugin at once.

Why it's worth doing in November, not December 30

December is a busy month. Hosting support lines get slow, web developers take time off, and you probably have your own year-end paperwork to deal with. If the upgrade breaks something, you want time to fix it calmly, not a deadline breathing down your neck.

There's also the January factor. A lot of people start looking for a therapist in the new year, often after insurance plans reset. You want your site working well and loading safely when those people show up.

Want us to handle it for free?

We'd rather no therapist's site gets hacked over something this fixable. So as part of our Black Friday offer, we're doing the PHP upgrade and a WordPress security check for free for 10 US therapy practices. We'll back up your site, update what needs updating, move you to a supported PHP version and test your contact form and booking links.

If you'd like one of those spots, or you just want someone to look at your site and tell you where you stand, book a free 30-minute call (opens in a new tab). And if you'd rather never think about PHP versions again, that's what our WordPress care plans are for.