callrail records

2 published records for vendor callrail.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2022-36796No exploit	WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)callrail · callrail phone call tracking · CWE-79 Pre-auth XSS CSRF	Medium6.1	—	0.3%	Sep 1, 2022
21Monitor	CVE-2023-5051No exploit	CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecallrail · callrail phone call tracking · CWE-79 XSS	Medium5.4	—	0.4%	Oct 27, 2023

CVE-2022-36796
24Monitor
WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
callrail · callrail phone call trackingSep 1, 2022
CVE-2023-5051
21Monitor
CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
callrail · callrail phone call trackingOct 27, 2023