FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet

FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 6.4 out of 10. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 3 issues recorded for FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-30437

Webinar and Video Conference with Jitsi Meet <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet banner
Latestv2.9.7

FlexMeeting – Webinar & Meeting Plugin for Jitsi Meet

WPPOOL

Author

WPPOOL

4.5(38)
90/100
Last Updated
2026-09-01 (12d ago)
Active Installs
1,000+
Downloads
125,780
Requires WP
5.2+
Requires PHP
8.0+
Tested up to
WP 7.0.4
Created
2020-07-22 (6y ago)

Embed Meetings, Host Webinars, and Video Conferences – All from Your Dashboard FlexMeeting is built on the Jitsi platform and enables hosting live webinars, meetings, conferences, online classes, and video calls directly on your website. Let’s grow, connect, and thrive together! 🤝 Join Our Facebook Community 🌐 Follow Us on X (Twitter) 🎥 Subscribe on YouTube 👍 Like Our Facebook Page 👁️ View Demo | 🚀 Get Premium | 🤝 Join Our Facebook Community Easily create, manage, and promote webinars without leaving your site. Customize sessions to match your website’s look and feel. Built-in post type, shortcodes, Elementor widgets, and Gutenberg blocks let you create webinars without coding. With front-end meeting creation, users can set up and manage sessions directly from the front end. FlexMeeting integrates with WooCommerce, LMS plugins, multivendor tools, email tools, and booking plugins. It provides a streamlined video-conference workflow without requiring coding. You can turn a meeting into a webinar landing page. Whiteboard integration helps you draw, brainstorm, and collaborate visually. You can also embed webinars anywhere on your site. FlexMeeting Pro offers JaaS integration for a branded experience with a custom domain, letting you create unique URLs that match your business. FlexMeeting integrates with WooCommerce, LearnPress, LearnDash, and Tutor LMS, supporting up to 500 participants, livestreaming, transcription, and recording (requires a JaaS 8×8 subscription). Calendar integration is available for Google, Outlook, and Apple Calendar. You can install the plugin and start meetings without extra sign-in steps. Configure your video frame dimensions and begin — suitable for users of varying technical skill levels. HD video, screen sharing, whiteboard, and collaboration features are supported across devices. 🎁 Free Features Meeting without time-limit – Host sessions without strict duration limits. Using 8×8-hosted domains gives 2 hours per meeting, automatically renewing afterward. Meeting Gutenberg block – Create conferences or calls with the built-in block. Elementor widget – Create meetings using shortcode within Elementor. Meeting Shortcode – Shortcodes available for embedding and creating meetings. Meeting name customization – Personalize webinar names for easier recognition. Mute meeting – Mute or unmute audio as needed. Screen sharing – Hosts and participants can share screens. Unlimited meetings – Host as many sessions as required. LMS integration – Use LearnDash or similar LMS plugins to add meetings to courses. Multisite support – Access features across multisite networks. 👁️ View Demo | 🚀 Get Premium | 🤝 Join Our Facebook Community 🔥 Pro Features Custom domain – Create a branded meeting URL for your website. Meeting post type – Embed created meetings as posts. Meeting scheduling – Schedule sessions at specific times and run multiple events simultaneously. Livestream, recording, transcription – Record, stream, or auto-transcribe meetings (requires JaaS 8×8 Premium). Whiteboard integration – Draw or illustrate during meetings. Calendar integration – Sync meetings with Google, Outlook, and Apple Calendar. Meeting registration – Allow only registered participants to join. Recurring meeting – Reuse the same meeting ID and settings. Hide sidebar – Option to hide meeting-details menu. Video-resolution control – Start meetings in preferred resolution (720p–1440p+). Advanced customization – Start calls muted or set participant thresholds. 👁️ View Demo | 🚀 Get Premium | 🤝 Join Our Facebook Community 💪 FlexMeeting Ultimate Features All Pro Features WooCommerce integration – Link video conferencing to WooCommerce products. BuddyPress integration – BuddyPress group members can join rooms anytime. Front-end meeting creation – Create and manage meetings from the front end. Integration with LearnPress and Tutor LMS – Add video meetings to virtual classrooms. Integration with multivendor marketplaces – Create and sell video meetings from vendor dashboards. Integration with booking plugins – Automate bookings and send meeting links. Integration with email-marketing tools (upcoming) – Add registrants to tools like Mailchimp or Zapier. 👁️ View Demo | 🚀 Get Premium | 🤝 Join Our Facebook Community Some premium features (recording, transcription, streaming) require a JaaS subscription. FlexMeeting works as a bridge between your site and Jitsi services to provide meeting functionality within your dashboard. FlexMeeting Multivendor Addon (Ultimate) 🔥 If you run a marketplace, this addon lets vendors create and sell webinars from their dashboard. Each vendor can create and customize webinars and sell them as products. Currently supports Dokan Multivendor, WCFM Marketplace, and MultiVendorX. How to create meetings in Dokan Multivendor How to create meetings in WCFM Marketplace How to create meetings in MultiVendorX 👁️ View Demo | 🚀 Get Premium | 🤝 Join Our Facebook Community How to use as a Gutenberg block? On the post/page edit screen, click the Gutenberg plus icon. Add “Jitsi Meet” from the “Embeds” category. Set width and height. How to use as a shortcode? Use the shortcode: [jitsi-meet-wp name=”YourWebinarName” width=”700&#8243; height=”640&#8243;/] 🔥 More Awesome Plugins If you like FlexMeeting, consider exploring our other projects. 🌓 WP Dark Mode: Use WP Dark Mode plugin to create a stunning dark version for your WordPress website. WP Dark Mode works automatically without going into any complicated settings. 🟢 FlexTable – Sheets To WP Table Live Sync: Google Sheets allows you to input data on your Google sheet and show the same data on WordPress as a table effortlessly. Try Flex Table now! 💬 FormyChat: Connect Form to Chat Apps with Contact Form 7, WPForms, Gravity Form | Welcome Popup & Multi-agent Live Chat 🔄 FlexStock – Stock Sync with Google Sheet for WooCommerce: Auto-sync WooCommerce products from Google Sheets. Flex Stock is an easy, powerful, and simple inventory management system to handle your WooCommerce products. 🛒 FlexOrder – Order Sync with Google Sheet for WooCommerce: Manage WooCommerce orders from Google Sheets. WooCommerce order sync, e-commerce order management, and sales order management with Google Sheets. Try Flex Order now! 🎁 EchoRewards: With Echo Reward, you can refer a friend for WooCommerce to launch your customer referral program. Echo Rewards Referral Plugin is a WooCommerce referral plugin to boost your sales. Generate coupons, reward customers, and launch the ideal refer-a-friend program for your store. Privacy Policy FlexMeeting uses Appsero SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements. Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users. Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case. Learn more about how Appsero collects and uses this data. External services This plugin connects to the following third-party/external services to provide its core meeting functionality and, where noted, optional telemetry: 1. Jitsi Meet server (default: meet.jit.si) This plugin embeds a Jitsi Meet video conferencing session in your site. By default it connects to the free public server meet.jit.si. If you select the Branded/JaaS mode, it connects to 8&#215;8’s JaaS service instead (see #3 below). Meeting participant names/emails (if logged in) and meeting metadata are sent to whichever Jitsi server is configured, every time a meeting is loaded. Terms of Service: https://jitsi.org/meet-jit-si-terms-of-service/ Privacy Policy: https://jitsi.org/meet-jit-si-privacy/ 2. Jitsi Hosted (jitsihosted.app) — used only in “Hosted Subdomain” API mode When the plugin’s “Hosted Subdomain” connection mode is selected, it sends requests to jitsihosted.app to generate and verify meeting JWT tokens and to check server status. Data sent includes the WordPress user’s display name, email address, WordPress user ID, meeting room name, and moderator status, at the time a meeting is created or a connection test is run. Terms of Service: https://wppool.dev/flexmeeting-terms-of-service/ Privacy Policy: https://wppool.dev/flexmeeting-privacy-policy/ 3. 8&#215;8 JaaS (8&#215;8.vc) — used only in “Branded”/JaaS API mode When the plugin’s Branded/JaaS connection mode is selected, it loads the 8&#215;8 JaaS external meeting API script (https://8x8.vc/external_api.js) to embed the meeting interface. Meeting participation data is exchanged directly between the visitor’s browser and 8&#215;8’s service. Terms of Service: https://www.8&#215;8.com/terms-and-conditions Privacy Policy: https://www.8&#215;8.com/legal/privacy-policy 4. Appsero — optional, opt-in telemetry only See the Privacy Policy section above. Only active if you explicitly opt in via the admin notice. When active, Appsero also uses icanhazip.com solely to determine the site’s public IP address as part of the telemetry payload. Privacy Policy: https://appsero.com/privacy-policy/ 5. WPPOOL (fluent.wppool.dev) — optional, opt-in only If you opt in via the plugin’s data-sharing admin notice, your name and email address are sent to WPPOOL’s CRM system so we can follow up about your use of the plugin. Not active unless you submit this opt-in form. Terms of Service: https://wppool.dev/flexmeeting-terms-of-service/ Privacy Policy: https://wppool.dev/flexmeeting-privacy-policy/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C