Is WordPress 3.9.40 patched?
Summary iPlain-English security status for WordPress 3.9.40, built from its CVEs, active-exploitation data, end-of-life date and latest release.
WordPress 3.9.40 is part of the 3.9 release line. No known vulnerabilities affect it in our data. The 3.9 line reached end-of-life on 2014-09-04, so it no longer receives security patches. The latest supported WordPress release is 7.0.0.
Known issues affecting 3.9.40
None found for this version. ✓
Other WordPress versions
Check another release line of WordPress.
Frequently asked
Is WordPress 3.9.40 patched?
WordPress 3.9.40 is end-of-life and no longer receives security patches. Move to 7.0.0.
When does WordPress 3.9 reach end-of-life?
WordPress 3.9 reached end-of-life on 2014-09-04 and no longer receives security patches.
What is the latest version of WordPress?
The latest supported WordPress release is 7.0.0.
Is WordPress 3.9.40 still receiving security updates?
No — WordPress 3.9.40 is on the 3.9 line, which reached end-of-life on 2014-09-04 and no longer receives security updates. Upgrade to 7.0.0 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against WordPress's official advisory before you patch or upgrade — WordPress official site ↗