Wordpress 4.x — End of Life
EOLWordpress 4.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 4.9 | Nov 16, 2017 | — | Dec 6, 2018 | 4.9.29 | EOL |
| 4.8 | Jun 8, 2017 | — | Nov 16, 2017 | 4.8.28 | EOL |
| 4.7 | Dec 6, 2016 | — | Jun 8, 2017 | 4.7.33 | EOL |
| 4.6 | Aug 16, 2016 | — | Dec 6, 2016 | 4.6.30 | EOL |
| 4.5 | Apr 12, 2016 | — | Aug 16, 2016 | 4.5.33 | EOL |
| 4.4 | Dec 9, 2015 | — | Apr 12, 2016 | 4.4.34 | EOL |
| 4.3 | Aug 18, 2015 | — | Dec 8, 2015 | 4.3.35 | EOL |
| 4.2 | Apr 23, 2015 | — | Aug 18, 2015 | 4.2.39 | EOL |
| 4.1 | Dec 18, 2014 | — | Apr 23, 2015 | 4.1.42 | EOL |
| 4.0 | Sep 4, 2014 | — | Dec 18, 2014 | 4.0.38 | EOL |
CVEs affecting Wordpress 4.x (0)
Wordpress 4.x is EOL — migrate to Wordpress 5.x
Wordpress 5.x is the next major release. Plan your upgrade before Wordpress 4.x stops receiving security patches.
Frequently asked questions
Is Wordpress 4 end of life?
Yes. All Wordpress 4.x releases have reached end of life and no longer receive security patches. Migrate to Wordpress 5.x as soon as possible.
What CVEs affect Wordpress 4?
No CVEs are currently tracked for Wordpress 4.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Wordpress 4 version?
The latest Wordpress 4.x patch release is 4.9.29, released on March 13, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from Wordpress 4 to Wordpress 5?
To migrate from Wordpress 4 to Wordpress 5: (1) review the official Wordpress 5 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Wordpress 4 in production?
No. Wordpress 4 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA