{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/",
        "slug": "joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0",
        "url": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/"
        },
        "title": "Joomla 4 sites are past their announced October 14, 2025 security end date: upgrade through 5.4 to Joomla 6",
        "summary": "The Joomla Project said Joomla 4 would get no new features and security updates only until October 14, 2025. On that date it released Joomla 6.0 alongside Joomla 5.4, a bridge release for upgrading Joomla 5 sites, and it points sites still on 4.x to its 4.4 to 5.x upgrade guide.",
        "format": {
            "slug": "briefing",
            "name": "Briefing"
        },
        "priority": {
            "slug": "advisory",
            "name": "Advisory"
        },
        "featured": false,
        "image": {
            "theme": "cyber-defense",
            "label": "Cyber defense",
            "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-10-19T00:28:18+00:00",
        "modified_at": "2026-10-19T01:55:08+00:00",
        "reviewed_on": "2026-10-19",
        "reading_minutes": 2,
        "word_count": 323,
        "potentially_affected": "Organizations with websites, intranets or portals built on Joomla 4, and the agencies and hosting providers that maintain them.",
        "dse_recommendation": "DSE recommends moving every Joomla 4 site to a supported Joomla release, upgrading through 5.4 and then to 6, after testing on a copy of the site.",
        "primary_source": {
            "name": "Joomla! — Joomla 5.2.4 Security & Bugfix Release (and Joomla 4.4.11)",
            "url": "https://www.joomla.org/announcements/release-news/joomla-5-2-4-security-bugfix-release.html",
            "published_on": null,
            "authority": "www.joomla.org"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<p>The Joomla Project said Joomla 4 would get no new features and security updates only until October 14, 2025. On that date it released Joomla 6.0 alongside Joomla 5.4, a bridge release for upgrading Joomla 5 sites, and it points sites still on 4.x to its 4.4 to 5.x upgrade guide.</p>\n<h2>Source facts</h2>\n<p>In its <a href=\"https://www.joomla.org/announcements/release-news/joomla-5-2-4-security-bugfix-release.html\">Joomla 5.2.4 and 4.4.11 release announcement</a>, created February 18, 2025, the Joomla Project said no new features would be added to Joomla 4 and that it would receive security updates only until October 14, 2025; that release fixed an SQL injection flaw in the Scheduled Tasks component. It said moving from 4.4 to 5.x is an upgrade, not a migration, that extensions free of deprecated code work in Joomla 5 and most others work with the Backward Compatibility plugin enabled, and advised testing the upgrade on a copy of the production site first.</p>\n<p>The <a href=\"https://www.joomla.org/announcements/release-news/joomla-6-0-and-joomla-5-4-are-here.html\">Joomla 6.0 and 5.4 announcement</a>, created October 14, 2025, introduced automatic Joomla core updates in 5.4 and 6.0, building on the TUF-secured updates added in Joomla 5.1. It describes Joomla 5.4.0 as a bridge release for upgrading Joomla 5 sites to 6.0, says moving from 5.4 to 6.0 is an upgrade rather than a migration, and directs sites still on Joomla 4.x to the 4.4.x to 5.x upgrade guide.</p>\n<h2>Applicability</h2>\n<p>Use this for any website or intranet built on Joomla. Check each extension and template for Joomla 5 and 6 compatibility before upgrading, since unsupported extensions can block or break the upgrade.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends moving every Joomla 4 site to a supported Joomla release, upgrading through 5.4 and then to 6, after testing on a copy of the site. Back up files and the database first, check extensions in the Joomla Extensions Directory, treat the backward compatibility plugin as a temporary bridge, and turn on automatic core updates once the site is current.</p>\n<h2>Verification</h2>\n<p>Confirm each site’s Joomla version in the administrator panel, review its update settings, and keep a dated backup from before each upgrade.</p>\n<h2>Official references</h2>\n<p><a href=\"https://www.joomla.org/announcements/release-news/joomla-5-2-4-security-bugfix-release.html\">Joomla! — Joomla 5.2.4 Security &amp; Bugfix Release (and Joomla 4.4.11)</a>. <a href=\"https://www.joomla.org/announcements/release-news/joomla-6-0-and-joomla-5-4-are-here.html\">Joomla! — Joomla 6.0 and Joomla 5.4 are here!</a>. Reviewed October 19, 2026.</p>",
        "content_text": "The Joomla Project said Joomla 4 would get no new features and security updates only until October 14, 2025. On that date it released Joomla 6.0 alongside Joomla 5.4, a bridge release for upgrading Joomla 5 sites, and it points sites still on 4.x to its 4.4 to 5.x upgrade guide.\nSource facts\nIn its Joomla 5.2.4 and 4.4.11 release announcement, created February 18, 2025, the Joomla Project said no new features would be added to Joomla 4 and that it would receive security updates only until October 14, 2025; that release fixed an SQL injection flaw in the Scheduled Tasks component. It said moving from 4.4 to 5.x is an upgrade, not a migration, that extensions free of deprecated code work in Joomla 5 and most others work with the Backward Compatibility plugin enabled, and advised testing the upgrade on a copy of the production site first.\nThe Joomla 6.0 and 5.4 announcement, created October 14, 2025, introduced automatic Joomla core updates in 5.4 and 6.0, building on the TUF-secured updates added in Joomla 5.1. It describes Joomla 5.4.0 as a bridge release for upgrading Joomla 5 sites to 6.0, says moving from 5.4 to 6.0 is an upgrade rather than a migration, and directs sites still on Joomla 4.x to the 4.4.x to 5.x upgrade guide.\nApplicability\nUse this for any website or intranet built on Joomla. Check each extension and template for Joomla 5 and 6 compatibility before upgrading, since unsupported extensions can block or break the upgrade.\nDSE recommendation\nDSE recommends moving every Joomla 4 site to a supported Joomla release, upgrading through 5.4 and then to 6, after testing on a copy of the site. Back up files and the database first, check extensions in the Joomla Extensions Directory, treat the backward compatibility plugin as a temporary bridge, and turn on automatic core updates once the site is current.\nVerification\nConfirm each site’s Joomla version in the administrator panel, review its update settings, and keep a dated backup from before each upgrade.\nOfficial references\nJoomla! — Joomla 5.2.4 Security & Bugfix Release (and Joomla 4.4.11). Joomla! — Joomla 6.0 and Joomla 5.4 are here!. Reviewed October 19, 2026.",
        "content_markdown": "The Joomla Project said Joomla 4 would get no new features and security updates only until October 14, 2025. On that date it released Joomla 6.0 alongside Joomla 5.4, a bridge release for upgrading Joomla 5 sites, and it points sites still on 4.x to its 4.4 to 5.x upgrade guide.\n\n## Source facts\n\nIn its [Joomla 5.2.4 and 4.4.11 release announcement](https://www.joomla.org/announcements/release-news/joomla-5-2-4-security-bugfix-release.html), created February 18, 2025, the Joomla Project said no new features would be added to Joomla 4 and that it would receive security updates only until October 14, 2025; that release fixed an SQL injection flaw in the Scheduled Tasks component. It said moving from 4.4 to 5.x is an upgrade, not a migration, that extensions free of deprecated code work in Joomla 5 and most others work with the Backward Compatibility plugin enabled, and advised testing the upgrade on a copy of the production site first.\n\nThe [Joomla 6.0 and 5.4 announcement](https://www.joomla.org/announcements/release-news/joomla-6-0-and-joomla-5-4-are-here.html), created October 14, 2025, introduced automatic Joomla core updates in 5.4 and 6.0, building on the TUF-secured updates added in Joomla 5.1. It describes Joomla 5.4.0 as a bridge release for upgrading Joomla 5 sites to 6.0, says moving from 5.4 to 6.0 is an upgrade rather than a migration, and directs sites still on Joomla 4.x to the 4.4.x to 5.x upgrade guide.\n\n## Applicability\n\nUse this for any website or intranet built on Joomla. Check each extension and template for Joomla 5 and 6 compatibility before upgrading, since unsupported extensions can block or break the upgrade.\n\n## DSE recommendation\n\nDSE recommends moving every Joomla 4 site to a supported Joomla release, upgrading through 5.4 and then to 6, after testing on a copy of the site. Back up files and the database first, check extensions in the Joomla Extensions Directory, treat the backward compatibility plugin as a temporary bridge, and turn on automatic core updates once the site is current.\n\n## Verification\n\nConfirm each site’s Joomla version in the administrator panel, review its update settings, and keep a dated backup from before each upgrade.\n\n## Official references\n\n[Joomla! — Joomla 5.2.4 Security & Bugfix Release (and Joomla 4.4.11)](https://www.joomla.org/announcements/release-news/joomla-5-2-4-security-bugfix-release.html). [Joomla! — Joomla 6.0 and Joomla 5.4 are here!](https://www.joomla.org/announcements/release-news/joomla-6-0-and-joomla-5-4-are-here.html). Reviewed October 19, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/",
                "url": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-10-19"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Joomla 4 sites are past their announced October 14, 2025 security end date: upgrade through 5.4 to Joomla 6",
                        "item": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/#article",
                "identifier": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/",
                "url": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/",
                "headline": "Joomla 4 sites are past their announced October 14, 2025 security end date: upgrade through 5.4 to Joomla 6",
                "description": "The Joomla Project said Joomla 4 would get no new features and security updates only until October 14, 2025. On that date it released Joomla 6.0…",
                "abstract": "The Joomla Project said Joomla 4 would get no new features and security updates only until October 14, 2025. On that date it released Joomla 6.0 alongside Joomla 5.4, a bridge release for upgrading Joomla 5 sites, and it points sites still on 4.x to its 4.4 to 5.x upgrade guide.",
                "articleBody": "The Joomla Project said Joomla 4 would get no new features and security updates only until October 14, 2025. On that date it released Joomla 6.0 alongside Joomla 5.4, a bridge release for upgrading Joomla 5 sites, and it points sites still on 4.x to its 4.4 to 5.x upgrade guide.\nSource facts\nIn its Joomla 5.2.4 and 4.4.11 release announcement, created February 18, 2025, the Joomla Project said no new features would be added to Joomla 4 and that it would receive security updates only until October 14, 2025; that release fixed an SQL injection flaw in the Scheduled Tasks component. It said moving from 4.4 to 5.x is an upgrade, not a migration, that extensions free of deprecated code work in Joomla 5 and most others work with the Backward Compatibility plugin enabled, and advised testing the upgrade on a copy of the production site first.\nThe Joomla 6.0 and 5.4 announcement, created October 14, 2025, introduced automatic Joomla core updates in 5.4 and 6.0, building on the TUF-secured updates added in Joomla 5.1. It describes Joomla 5.4.0 as a bridge release for upgrading Joomla 5 sites to 6.0, says moving from 5.4 to 6.0 is an upgrade rather than a migration, and directs sites still on Joomla 4.x to the 4.4.x to 5.x upgrade guide.\nApplicability\nUse this for any website or intranet built on Joomla. Check each extension and template for Joomla 5 and 6 compatibility before upgrading, since unsupported extensions can block or break the upgrade.\nDSE recommendation\nDSE recommends moving every Joomla 4 site to a supported Joomla release, upgrading through 5.4 and then to 6, after testing on a copy of the site. Back up files and the database first, check extensions in the Joomla Extensions Directory, treat the backward compatibility plugin as a temporary bridge, and turn on automatic core updates once the site is current.\nVerification\nConfirm each site’s Joomla version in the administrator panel, review its update settings, and keep a dated backup from before each upgrade.\nOfficial references\nJoomla! — Joomla 5.2.4 Security & Bugfix Release (and Joomla 4.4.11). Joomla! — Joomla 6.0 and Joomla 5.4 are here!. Reviewed October 19, 2026.",
                "datePublished": "2026-10-19T00:28:18+00:00",
                "dateModified": "2026-10-19T01:55:08+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/joomla-4-end-of-security-support-october-2025-upgrade-joomla-5-4-6-0/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Joomla 4 sites are past their announced October 14, 2025 security end date: upgrade through 5.4 to Joomla 6"
                },
                "articleSection": [
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Cybersecurity",
                    "IT",
                    "Briefing",
                    "Advisory priority"
                ],
                "genre": "Briefing",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 323,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Joomla! — Joomla 5.2.4 Security & Bugfix Release (and Joomla 4.4.11)",
                    "url": "https://www.joomla.org/announcements/release-news/joomla-5-2-4-security-bugfix-release.html"
                }
            }
        ]
    }
}