hallowebsite Plugin Vault

DE | EN

Manages your own plugin ZIPs with releases, versions, changelogs and secure private storage outside the web root. It publishes a page per plugin with full bilingual documentation via shortcodes, and offers card grids, a REST API and controlled download links.

Download v1.6.0
Version
1.6.0
Updated
14. November 2026
Requires WordPress
6.3
Requires PHP
8.2
File size
44,7 KB
Author
hallowebsite

Overview

hallowebsite Plugin Vault is a release manager for your own WordPress plugins. You create a project for each plugin, upload ZIPs as versioned releases, and the vault checks every archive, reads the plugin header and stores the file privately outside the web root. Each plugin gets a public page with bilingual documentation. You design that page yourself with shortcodes, and downloads are delivered through controlled links: admin only, logged-in users, a private token link or public.

Features

  • Plugin projects and releases with version, channel (stable, beta, alpha, deprecated), changelog, release notes and compatibility data.
  • ZIP validation: plugin header detection, path, symlink and zip-bomb checks, SHA-256 checksum, size limits.
  • Private storage outside the web root, with migration of older uploads.
  • Access modes per release: admin, logged in, token link (with expiry) or public.
  • Public plugin pages at /plugins/{slug}/ with a short description and full documentation in German and English.
  • Shortcodes for your own single template (Kadence Elements or the built-in template).
  • Card grid via shortcode or block, with filters, categories and drag & drop ordering.
  • REST API, backup download of all releases, and inline editing in the admin lists.

Setup

  1. Set a permanent storage path outside the web root in wp-config.php: define('HPV_PRIVATE_DIR', '/home/ACCOUNT/private/vault');
  2. Go to Plugin Vault → Releases → Add New, upload a ZIP and save. The plugin project is created automatically.
  3. Edit the plugin: add the short descriptions (DE/EN), the documentation, categories and a featured image.
  4. Choose the URL base, template and language under Plugin Vault → Plugin-Seiten.

Single-page shortcodes

ShortcodeOutput
[hpv_plugin field="version"]A single value: title, short, version, channel, release_date, filesize, requires_wp, tested_up_to, requires_php, downloads, slug, categories, author, permalink.
[hpv_plugin_description]Short description in the current language.
[hpv_plugin_docs toc="1"]Full documentation with an optional table of contents.
[hpv_plugin_download]Download button for the current release.
[hpv_plugin_meta]Key facts as a definition list.
[hpv_plugin_changelog release="all"]Changelog of the latest or all releases.
[hpv_plugin_releases]Version table with download links.
[hpv_plugin_lang_switch]DE | EN switch (?hpv_lang=).
[hpv_plugin_image]Featured image.

Outside a plugin page, add id="123" or slug="my-plugin". Every shortcode accepts lang and class.

Card grid

[hpv_plugins category="kadence" show_description="1" desktop="3" show_filters="1"]

The title and the Learn more button link to the plugin page. The full parameter list is in the backend under Shortcodes Guide.

Security

  • Token links are never shown in cards, the REST API or plugin pages, only in the backend.
  • Internal and archived plugins aren't publicly reachable and don't appear in the sitemap.
  • Release pages are noindex and send no-referrer.
  • ZIPs are never extracted or executed. The checks are not a malware scan.

Changelog

Changed:
- Rebranding: neuer Name „hallowebsite Plugin Vault“, Autor hallowebsite, Plugin-URI https://hallowebsite.de/plugins/plugin-vault/
- Keine funktionalen Änderungen.