Wordpress 6.x — End of Life
EOL Actively exploitedWordpress 6.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 6.9 | Dec 2, 2025 | — | May 20, 2026 | 6.9.5 | EOL | |
| 6.8 | Apr 15, 2025 | — | Dec 2, 2025 | 6.8.6 | EOL | |
| 6.7 | Nov 12, 2024 | — | Apr 15, 2025 | 6.7.5 | EOL | |
| 6.6 | Jul 16, 2024 | — | Nov 12, 2024 | 6.6.5 | EOL | |
| 6.5 | Apr 2, 2024 | — | Jul 16, 2024 | 6.5.8 | EOL | |
| 6.4 | Nov 7, 2023 | — | Apr 2, 2024 | 6.4.8 | EOL | |
| 6.3 | Aug 8, 2023 | — | Nov 7, 2023 | 6.3.8 | EOL | |
| 6.2 | Mar 29, 2023 | — | Aug 8, 2023 | 6.2.9 | EOL | |
| 6.1 | Nov 2, 2022 | — | Mar 29, 2023 | 6.1.10 | EOL | |
| 6.0 | May 24, 2022 | — | Nov 1, 2022 | 6.0.12 | EOL |
CVEs affecting Wordpress 6.x (3)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-63030 | CRITICAL | 9.8 | 97.92% | KEV | 6.9 | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which… | Jul 17, 2026 |
| CVE-2026-60137 | MEDIUM | 5.9 | 77.97% | KEV | 6.8 | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p… | Jul 17, 2026 |
| CVE-2026-60137 | MEDIUM | 5.9 | 77.97% | KEV | 6.9 | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p… | Jul 17, 2026 |
Wordpress 6.x is EOL — migrate to Wordpress 7.x
Wordpress 7.x is the next major release. Plan your upgrade before Wordpress 6.x stops receiving security patches.
Frequently asked questions
Is Wordpress 6 end of life?
Yes. All Wordpress 6.x releases have reached end of life and no longer receive security patches. There are 3 known CVEs affecting Wordpress 6.x, including 1 critical. Migrate to Wordpress 7.x as soon as possible.
What CVEs affect Wordpress 6?
There are 3 CVEs tracked for Wordpress 6.x, including 1 critical severity issue and 3 listed in the CISA Known Exploited Vulnerabilities catalog. See the full list above with CVSS and EPSS scores.
What is the latest Wordpress 6 version?
The latest Wordpress 6.x patch release is 6.9.5, released on July 17, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from Wordpress 6 to Wordpress 7?
To migrate from Wordpress 6 to Wordpress 7: (1) review the official Wordpress 7 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Wordpress 6 in production?
No. Wordpress 6 has reached end of life and security vulnerabilities are no longer patched. Critically, 3 CVEs affecting Wordpress 6.x are in the CISA KEV catalog — meaning they are actively exploited in the wild. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA