Wagtail

Wagtail is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Evidence status

Shown dates are scoped to the release and support phase named in the source. They should not be applied to other editions or service packs.

Product overview

Main capabilities

Application development components
Versioned runtime or build interfaces
Security and compatibility maintenance

Typical use

Used by software teams to build, run or maintain applications.

Deployment

Included in source projects, application dependencies, build systems or managed runtimes.

Lifecycle records

Release	Boundary	Date
0.1	Support ends	March 2014
0.2	Support ends	May 2014
0.3	Support ends	July 2014
0.4	Support ends	August 2014
0.5	Support ends	September 2014
0.6	Support ends	October 2014
0.7	Support ends	November 2014
0.8 LTS	Support ends	March 2016
1.4	Support ends	December 2016
1.4 LTS	Support ends	December 2016
1.8	Support ends	August 2017
1.8 LTS	Support ends	August 2017
1.12	Support ends	November 2018
1.12 LTS	Support ends	November 2018
1.13	Support ends	April 2019
1.13 LTS	Support ends	April 2019
2.4	Support ends	1 August 2019
2.5	Support ends	6 November 2019
2.3	Support ends	1 February 2020
2.3 LTS	Support ends	1 February 2020
2.6	Support ends	3 February 2020
2.8	Support ends	11 August 2020
2.9	Support ends	2 November 2020
2.10	Support ends	2 February 2021
2.7	Support ends	3 February 2021
2.7 LTS	Support ends	3 February 2021
2.12	Support ends	1 August 2021
2.13	Support ends	4 November 2021
2.11	Support ends	1 February 2022
2.11 LTS	Support ends	1 February 2022
2.14	Support ends	7 February 2022
2.16	Support ends	1 August 2022
3.0	Support ends	1 November 2022
2.15	Support ends	1 February 2023
2.15 LTS	Support ends	1 February 2023
4.0	Support ends	1 February 2023
4.2	Support ends	1 August 2023
5.0	Support ends	1 November 2023
4.1	Support ends	1 February 2024
4.1 LTS	Support ends	1 February 2024
5.1	Support ends	1 February 2024
6.0	Support ends	1 August 2024
6.1	Support ends	1 November 2024
6.2	Support ends	3 February 2025
5.2	Support ends	6 May 2025
5.2 LTS	Support ends	6 May 2025
6.4	Support ends	4 August 2025
7.1	Support ends	2 February 2026
6.3	Support ends	1 May 2026
6.3 LTS	Support ends	1 May 2026
7.2	Support ends	4 May 2026
7.3	Support ends	25 August 2026
7.0	Support ends	2 November 2026
7.0 LTS	Support ends	2 November 2026
8.0	Support ends	2 February 2027
8.0*	Support ends	2 February 2027
8.1	Support ends	4 May 2027
8.1*	Support ends	4 May 2027
8.2	Support ends	2 August 2027
7.4	Support ends	2 November 2027
7.4 LTS	Support ends	2 November 2027
8.3	Support ends	6 November 2028

Official sources

VERIFIED

Wagtail official lifecycle source

Checked automatically. A source link alone does not verify a lifecycle boundary.

Extracted 39 lifecycle record(s), including 39 bounded date record(s), from the registered official source.

Open publisher source

Package vulnerability advisories

CVE-2023-28836

Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views

Fixed: 4.1.4, 4.2.2

CVE-2021-29434

Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields

Fixed: 2.11.7, 2.12.4

GHSA-jm5p-837g-rv8g

Wagtail: Improper restriction handling on Page translation API endpoint

Fixed: 7.0.9, 7.3.4, 7.4.3, 8.0rc2

CVE-2026-55468

Wagtail: Improper restriction handling on Pages admin API

Fixed: 7.0.9, 7.3.4, 7.4.3, 8.0rc2

CVE-2024-35228

Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`

Fixed: 6.0.5, 6.1.2

CVE-2023-28837

Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files

Fixed: 4.2.2, 4.1.4

CVE-2024-32882

Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`

Fixed: 6.0.3

CVE-2026-55468

Wagtail: Improper restriction handling on Pages admin API

Fixed: 7.0.9, 7.3.4, 7.4.3, 8.0rc2