GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference

GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference has a vendor fix available, so running the current release closes it.

All of these findings were reported by Legion Hunter. GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2026-6440

GoodMeet <= 1.1.8 - Cross-Site Request Forgery to Google Meet Credential Reset via 'goodmeet_reset_google_meet_credential'

Read the full analysis

Vulnerability Records

1 records
GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference banner
Latestv2.1.1

GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference

Sovlix

Author

Sovlix

5.0(5)
100/100
Last Updated
2026-10-11 (8d ago)
Active Installs
90+
Downloads
3,437
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2025-06-03 (1y ago)

📘 Documentation | 🔥 Get GoodMeet PRO | 🤝 Join Community | 🕹️ YouTube | ▶️ GoodMeet Tutorials GoodMeet lets you create, schedule and manage Google Meet meetings right from your WordPress site. It is built for educators, coaches, consultants, course creators and anyone who runs online classes, webinars or client calls. Every meeting gets a Google Meet link, a Google Calendar event and its own page on your site. Pick a design for that page, embed meetings anywhere with shortcodes and blocks, and connect GoodMeet to your LMS, Google Classroom or WooCommerce store. Features marked (Pro) need GoodMeet Pro. Everything else is in this free plugin. New to GoodMeet? The step-by-step guides walk you through every feature, from connecting your Google account to selling meetings. 💡 Use Cases Run live classes for your Tutor LMS, LearnPress, Academy LMS or LifterLMS courses. Post meetings to your Google Classroom classes. Sell consultations, webinars and online classes through WooCommerce. Let marketplace vendors sell their own meetings on Dokan, WCFM or MultiVendorX. Let instructors create and host meetings from the front end of your site. 🚀 Getting Started Guided setup: a Get Started page walks you through connecting Google and creating your first meeting. Your own Google Cloud project: upload your OAuth client file once, approve access, and one connection covers Google Meet, Google Calendar and Google Classroom. Meeting wizard: create and edit meetings in clear steps: details, date and time, access and controls, page design. Rich descriptions: write meeting descriptions in the WordPress editor, with headings, lists and links. Meeting defaults: set the time zone, reminder and calendar rules once, and every new meeting starts with them. Full guide: How to Connect Google Meet to WordPress Video walkthrough: Watch the setup video 🎨 Meeting Page Themes Every meeting has its own page on your site. Choose how it looks. 2 free themes: Classic and Paper. 12 Pro themes (Pro): Cover, Studio, Cadence, Guestlist, Admit, Lobby, Lesson, Keynote, Consult, Aurora, Journal and Encore, each made for a kind of meeting such as webinars, recurring standups, consultations or lessons. Theme per meeting: set a site-wide theme, then pick a different one on any single meeting. Style controls: brand colour, button shape, sidebar side, thumbnail, and hiding the theme header and footer. Page background and custom background colour (Pro). Clear meeting states: countdown before the start, a Join button while live, and an ended state once the meeting is over. 📅 Meetings & Google Calendar Create Google Meet meetings with a Google Calendar event for each one. Set the time zone, duration, reminder and event status. Choose who gets calendar emails, whether the event shows as busy or free, and its visibility. Countdown timer, add-to-calendar buttons and meeting thumbnails. Duplicate meetings with one click. Recurring meetings (Pro): daily, weekly, monthly or yearly, ending on a date, after a number of sessions, or never. Registration (Pro): ask visitors for their name and email before they get the join link. Page access (Pro): open to everyone, logged-in users only, or selected roles. Password and co-hosts (Pro): protect a meeting and add co-hosts. 🧩 Shortcodes & Blocks Meeting list shortcode: a searchable, sortable table of the meetings each visitor may open. Single meeting shortcode with options to hide the details, timer or calendar box. Google Meet block for the block editor and an Elementor widget. Embedded meetings follow the same page access rule as the meeting page. 🎓 LMS Integration Add Google Meet live classes to your courses. Works with Tutor LMS, LearnPress, Academy LMS and LifterLMS (Pro). Live classes on lessons and courses (Pro): instructors schedule a live class from the course editor, and enrolled students see it on the lesson with a countdown and Join button. Course access (Pro): only enrolled students can join. Each LMS has its own switch under Integrations. 🏫 Google Classroom Turn on Google Classroom, see the classes you teach and their students, and post a meeting to a class stream. The post updates when you edit the meeting. Create classes and send invites (Pro). Link classes to Tutor LMS, LearnPress and Academy LMS courses (Pro). Attendance, student sign-in and teacher and student dashboards (Pro). 👩‍🏫 Instructors & Front End Instructors (Pro): add instructors who create and host their own meetings. Front-end meetings (Pro): instructors create meetings from a dashboard page on your site, without wp-admin. Instructor and student dashboards (Pro) with meetings, classes, students and attendance. Students never see Google setup messages. Only admins and instructors do. 🛒 WooCommerce Sell meetings (Pro): link a meeting to a WooCommerce product and sell tickets. Buyers get the meeting details in their order email and in My Account. Use any WooCommerce payment gateway. WooCommerce Bookings (Pro): create a Google Meet meeting for each confirmed booking. 🏪 Multi-Vendor Marketplaces Dokan, WCFM Marketplace and MultiVendorX (Pro): vendors sell their own meetings from their vendor dashboard. Vendors use their own calendar: turn it on to let each vendor connect their own Google account from a Configure page. Turn it off and meetings use the site owner’s account. Each marketplace has its own switch under Integrations. ✅ More Works on phones and tablets, and the admin meets WCAG 2.2 AA. Translation ready. Built with React. The uncompiled source ships with the plugin. 📘 Documentation | 🔥 Get GoodMeet PRO | 🤝 Join Community | 🕹️ YouTube | ▶️ GoodMeet Tutorials 📢 Hear From Our Users ⭐⭐⭐⭐⭐ Best Google Meet Plugin Lots of features and very good support 💯 – by @countingstar ⭐⭐⭐⭐⭐ Really useful plugin! I’ve used it with LMS and multivendor plugins and it works fantastic. Everything runs smoothly and makes managing Google Meet so much easier. Highly recommended! – by @jiasian23 ⭐⭐⭐⭐⭐ Works nice for me This plugin help me a lot, easy to setup and use. i just connect google account and meetings working fine inside word-press. not complicated, simple and save me time. really like it, thanks dev team! – by @marklink 😍 Other Plugins from Our team MeetingHub – Zoom Meeting, Google Meet, Jitsi Meet & Webex integration. The All-in-One Webinar & Video Conference Solution for WordPress DriveHub – Google Drive Integration for WordPress ZooMeet – Zoom Meeting & Webinar Integration | Dedicated Zoom Video Conference Solution for WordPress WeMeet – Webex Integration for Webinar, Meeting & Video Conference TogMeet – Microsoft Teams Integration for Webinar, Meeting & Video Conference External Services This plugin connects to the Google Meet and Google Calendar APIs in order to create, manage, and synchronize meetings from your WordPress site. What the service is and what it is used for: Google Meet API is used to create and manage video meetings. Google Calendar API is used to sync meeting times, send reminders, and manage calendar events. What data is sent and when: When creating or updating a meeting, the following data is sent to Google APIs: Meeting title, description, date/time, timezone Attendees’ email addresses (only if you add them) Your connected Google account info (OAuth tokens, securely stored) No data is sent unless you explicitly create a meeting or connect your Google account. Google Classroom API (classroom.googleapis.com): used only if you turn on Google Classroom under GoodMeet > Classroom. It reads the classes you teach and their student lists (names and email addresses), to show them in wp-admin. Student data is cached for 15 minutes and is not stored as WordPress users. When you pick a class on a meeting, it posts an announcement to that class with the meeting title, time, description and a link to the meeting page, updates it when you edit the meeting, and deletes it when you delete the meeting. Nothing is sent to Google Classroom while this option is off. Covered by the same Google Terms of Service and Google Privacy Policy listed below. Freemius is used for plugin licensing (activating GoodMeet Pro), and for basic usage telemetry that helps us maintain compatibility and provide support. It automatically sends non-sensitive site data (site URL, PHP/WordPress version, plugin version, and license/premium status) on admin pages while the plugin is active. Admin email is only sent if you opt in during the connection/activation screen. This service is provided by Freemius, Inc.: Terms of Service, Privacy Policy. Terms of Service and Privacy Policy: Google Terms of Service Google Privacy Policy To use these features, users must authenticate with their Google account via OAuth. All API interactions follow Google’s security and privacy guidelines. Source Code The admin interface is built with React and compiled to the minified JavaScript shipped in assets/dist/. The uncompiled source is in assets/src/, with package.json and composer.json in the plugin root.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C