CVE-2022-36796

🗓️ 01 Sep 2022 16:49:39Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 55 Views

CVE-2022-36796 CSRF vulnerability leading to stored XSS in CallRail, Inc. CallRail Phone Call Tracking plugi

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-36796	1 Sep 202220:38	–	circl
CNNVD	WordPress plugin CallRail Phone Call Tracking 跨站脚本漏洞	1 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-36796 WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)	1 Sep 202216:49	–	cvelist
EUVD	EUVD-2022-39496	3 Oct 202520:07	–	euvd
NVD	CVE-2022-36796	1 Sep 202217:15	–	nvd
OSV	CVE-2022-36796	1 Sep 202217:15	–	osv
Patchstack	WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)	1 Sep 202200:00	–	patchstack
Prion	Cross site request forgery (csrf)	1 Sep 202217:15	–	prion
Positive Technologies	PT-2022-23631 · Callrail · Callrail Phone Call Tracking Plugin	1 Sep 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-36796 WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)	1 Sep 202216:49	–	vulnrichment

NVD

Vulners

Node

callrail callrail_phone_call_trackingRange≤0.4.9wordpress

[
  {
    "product": "CallRail Phone Call Tracking (WordPress plugin)",
    "vendor": "CallRail, Inc.",
    "versions": [
      {
        "lessThanOrEqual": "0.4.9",
        "status": "affected",
        "version": "<= 0.4.9",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/callrail-phone-call-tracking/wordpress-callrail-phone-call-tracking-plugin-0-4-9-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting-xss
wordpress	www.wordpress.org/plugins/callrail-phone-call-tracking/

28 Apr 2026 16:07Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

EPSS0.00137

SSVC