porro

End of life  /  Craft CMS  /  4

End of life

Craft CMS 4 is past end of life.

Security fixes stopped on 30 Apr 2026, 182 days ago. New vulnerabilities in 4 won’t be fixed.

Released
4 May 2022
Active support
ended 30 Apr 2025
Security fixes
ended 30 Apr 2026
Latest
4.18.9

Upgrade to Craft CMS 5: security fixes until 31 Dec 2031.

Release cycles

Every Craft CMS cycle, at a glance.

Active support means bug fixes and security fixes; after it, security fixes only. Past the end of security support, nothing.

  1. 5
  2. 4
  3. 3
  4. 2
  • Active support
  • Security fixes only
  • Supported
  • Ends within 90 days
  • Ended

What to upgrade to

Go to 5.

5 is the newest supported Craft CMS cycle, with security fixes until 31 Dec 2031.

Before you upgrade

Update to the latest release of your current major first, then follow the upgrade guide. Plugins need versions that support the new major. Read the Craft CMS 5 upgrade guide

How to check your version

Which Craft CMS is this site on?

In the app

$ php craft --version
Craft CMS 5.8.20

In the lock file

$ composer show craftcms/cms | grep versions
versions : * 5.8.20
# composer.lock is what deploys

In the control panel

Utilities → System Report
# shows Craft, plugin and PHP versions

Know before support ends.

Porro reads the PHP, framework and database version from every site and tells you 90 days before support runs out.

Start your free trial →

Dates from endoflife.date/craft-cms, checked daily · data as of 29 Oct 2026.