Each major version of PHP (the language that runs PrestaShop) is supported by the community for about 3 years: 2 years of active fixes, then 1 year of security-only fixes. After that, the version is declared end-of-life (EOL): no more patches, even for critical flaws.
| PHP version | End of life | Status |
|---|---|---|
| 7.0 | January 10, 2019 | Critical |
| 7.1 | December 1, 2019 | Critical |
| 7.2 | November 30, 2020 | Critical |
| 7.3 | December 6, 2021 | Critical |
| 7.4 | November 28, 2022 | Critical |
| 8.0 | November 26, 2023 | Critical |
| 8.1 | December 31, 2025 | Urgent |
| 8.2 | December 31, 2025 | Urgent |
| 8.3 | November 30, 2026 | Supported |
When a PHP version is no longer patched, every vulnerability discovered after its end-of-life stays exploitable forever on your server. Botnets constantly scan the web for vulnerable sites. A PrestaShop store on PHP 7.0 in 2026 is a door open to every attacker: the 2019 flaws still work, and no one will ever fix them.
Concretely, the risks: customer data theft (databases), invisible backdoor installation, site hijacking to phishing pages, defacement, and sometimes full server takeover.
Two methods:
Passive audit, no modification of your site. Score /100 in 30 seconds.
Migrating to a supported version (8.3 or 8.4) is the only lasting solution. For PrestaShop, first check your version's compatibility: a PrestaShop 1.6 doesn't run natively on PHP 8 — which is one of the reasons so many stores stay stuck on old PHP.
If your store is affected, our PrestaShield module gives you the full audit and a prioritized migration plan. You can also contact us for an upgrade intervention.
Sources: official PHP end-of-life dates (php.net/supported-versions). Statistics from our audit of 60 French stores, August 2026.