CallRail Phone Call Tracking
Healthy: maintained, last release 11 Feb 2026, no unpatched vulnerabilities.
Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is CallRail Phone Call Tracking still maintained?
- Yes. Last release 11 Feb 2026, 0 releases in the last 24 months. 11 Feb 2026 · wordpress.org
- Who owns CallRail Phone Call Tracking, and has it changed hands?
- No change recorded. Main committer jamescallrail since Sep 2022. 4 Nov 2026 · SVN log
- Was CallRail Phone Call Tracking removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is CallRail Phone Call Tracking safe?
- 2 known vulnerabilities, all fixed (latest in 0.5.3). Not on the exploited list. 24 Oct 2023 · Wordfence Intelligence
- Is the latest CallRail Phone Call Tracking update safe to install?
- No ownership change before 0.5.3. No one-star spike after it. 24 Oct 2023 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| adamcallrail | 12 Nov 2018 to 12 Nov 2018, 2 commits |
|---|---|
| wbdowis | 24 Jan 2019 to 18 Feb 2019, 2 commits |
| johnjohnjohnjohnjohn | 17 Jul 2019 to 21 Jan 2020, 11 commits |
| br1anr | 15 Jan 2020 to 17 Nov 2021, 15 commits |
| creugene | 6 Aug 2020 to 17 Aug 2020, 4 commits |
| jamescallrail | 7 Sep 2022 to 11 Feb 2026, 18 commits |
| ewinckcr | 11 Jan 2023 to 11 Jan 2023, 2 commits |
| crbenson | 14 Dec 2023 to 15 Dec 2023, 2 commits |
8 committers recorded. No ownership change since 2011.
Maintenance
- Last release
- 9 months ago
- Releases, 24 months
- 0
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 11 Feb 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 3.7.
Average rating stayed at 1.0 between Q2 2024 and Q4 2025.
| 5 star | 4 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 2 |
- No longer updated, no longer works · 1 star · 10 Nov 2025
- Bad Performance · 1 star · 18 Apr 2024
Security record
2 vulnerabilities on record, all patched (latest fixed in 0.5.3).
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 24 Oct 2023 | CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 6.4 | <= 0.5.2 | 0.5.3 | Patched before disclosure |
| 1 Sep 2022 | CallRail Phone Call Tracking <= 0.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting | 6.1 | <= 0.4.9 | 0.4.10 | 8 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 72 |
|---|---|
| 11 May 2026 | 204 |
| 18 May 2026 | 203 |
| 25 May 2026 | 198 |
| 1 Jun 2026 | 217 |
| 8 Jun 2026 | 232 |
| 15 Jun 2026 | 224 |
| 22 Jun 2026 | 239 |
| 29 Jun 2026 | 379 |
| 6 Jul 2026 | 225 |
| 13 Jul 2026 | 190 |
| 20 Jul 2026 | 221 |
| 27 Jul 2026 | 287 |
| 3 Aug 2026 | 495 |
| 10 Aug 2026 | 564 |
| 17 Aug 2026 | 422 |
| 24 Aug 2026 | 265 |
| 31 Aug 2026 | 261 |
| 7 Sep 2026 | 328 |
| 14 Sep 2026 | 424 |
| 21 Sep 2026 | 303 |
| 28 Sep 2026 | 333 |
| 5 Oct 2026 | 307 |
| 12 Oct 2026 | 302 |
| 19 Oct 2026 | 386 |
| 26 Oct 2026 | 350 |
| 2 Nov 2026 | 71 |
Weekly downloads over the last 4 weeks are 3% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 0.5.3 |
|---|---|
| Author | CallRail |
| Added | 30 Oct 2011 |
| Last updated | 11 Feb 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 3.0 |
| Tested up to | 6.9.11 |
| Requires PHP | not stated |
| Category | E-commerce & Shopping |
| Tags | seo, adwords, analytics, call tracking, conversion tracking |
Questions
Is CallRail Phone Call Tracking still maintained?
Yes. Last release 11 Feb 2026, 0 releases in the last 24 months.
Who owns CallRail Phone Call Tracking, and has it changed hands?
No change recorded. Main committer jamescallrail since Sep 2022.
Was CallRail Phone Call Tracking removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is CallRail Phone Call Tracking safe?
2 known vulnerabilities, all fixed (latest in 0.5.3). Not on the exploited list.
Is the latest CallRail Phone Call Tracking update safe to install?
No ownership change before 0.5.3. No one-star spike after it.