Wordpress 3.x — End of Life

EOL
EOL: Sep 4, 20144 releases in this series0 CVEs

Wordpress 3.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
3.9Apr 16, 2014Sep 4, 20143.9.40EOL
3.8Dec 12, 2013Apr 16, 20143.8.41EOL
3.7Oct 24, 2013Dec 12, 20133.7.41EOL
3.6Aug 1, 2013Oct 24, 20133.6.1EOL

CVEs affecting Wordpress 3.x (0)

No CVEs tracked for Wordpress 3.x.

Wordpress 3.x is EOL — migrate to Wordpress 4.x

Wordpress 4.x is the next major release. Plan your upgrade before Wordpress 3.x stops receiving security patches.

See Wordpress 4.x

Frequently asked questions

Is Wordpress 3 end of life?

Yes. All Wordpress 3.x releases have reached end of life and no longer receive security patches. Migrate to Wordpress 4.x as soon as possible.

What CVEs affect Wordpress 3?

No CVEs are currently tracked for Wordpress 3.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Wordpress 3 version?

The latest Wordpress 3.x patch release is 3.9.40, released on November 30, 2022. Always run the latest patch to benefit from all security fixes.

How to migrate from Wordpress 3 to Wordpress 4?

To migrate from Wordpress 3 to Wordpress 4: (1) review the official Wordpress 4 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Wordpress 3 in production?

No. Wordpress 3 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA