The GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference plugin for WordPress is vulnerable to Cross‑Site Request Forgery in versions up to and including 1.1.8. This flaw arises from a missing nonce verification in the reset_credential() function, which handles the wp_ajax_goodmeet_reset_google_meet_credential AJAX action. While the function does verify that the user has the manage_options capability, it does not validate a nonce, allowing CSRF attacks. As a result, an unauthenticated attacker can trick a site administrator into clicking a malicious link that deletes the plugin’s stored Google Meet API credentials (goodmeet_google_credentials) and OAuth tokens (goodmeet_google_token). The impact is the disabling of the Google Meet integration on the site, leading to service disruption for users who rely on that functionality. The weakness is classed as CWE‑352 and does not provide direct code execution, data exfiltration, or privilege escalation.

The vulnerability affects the sovlix GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference WordPress plugin. Versions 1.1.8 and any earlier releases are impacted. Sites that have upgraded past version 1.1.8 no longer contain the flaw. No other software products are listed as affected.

Based on the description, it is inferred that the likely attack vector is a phishing or social‑engineering campaign that targets an authenticated site administrator. The attacker’s exploit requires the victim to click a crafted link that submits an authorized request to admin‑ajax.php with the wp_ajax_goodmeet_reset_google_meet_credential action. No special network privileges are required beyond normal administrator access. The EPSS score of less than 1% indicates that automated exploitation is currently unlikely, and the flaw is not recorded in CISA’s KEV catalog. If an admin inadvertently follows a malicious link, the plugin’s stored credentials are instantly removed, rendering the Google Meet integration unusable, which constitutes a moderate but immediate administrative disruption.