Yes. Use the slugs<\/code> attribute on [kitgenix_document_manager_document]<\/code> with a comma-separated list of document slugs.<\/p><\/dd>\nDoes the plugin support PDFs?<\/h3><\/dt>\nYes. PDF is allowed by default and can be served inline when the global serving mode is set to inline. Browser support determines whether a compatible file is displayed or downloaded.<\/p><\/dd>\n
Is WooCommerce required?<\/h3><\/dt>\nNo. The plugin works without WooCommerce. If WooCommerce is active, the Shop Manager role is granted the Document Manager capability on activation so store managers can be permitted to manage documents.<\/p><\/dd>\n
Are existing Media Library files fully hidden from their original URL?<\/h3><\/dt>\nNot necessarily. Existing Media Library attachments remain in their original location. The plugin guards their WordPress REST-media exposure and attachment permalink when access is denied, but an already-known raw uploads URL may still be directly reachable depending on server configuration. See Security and File Protection<\/strong> above.<\/p><\/dd>\nWhat is included in settings export\/import?<\/h3><\/dt>\nPlugin settings and document categories. Documents, uploaded files, analytics, and signed-link secrets are intentionally excluded.<\/p><\/dd>\n
What happens when I uninstall the plugin?<\/h3><\/dt>\nPlugin settings\/log data are removed during uninstall. Document posts and managed attachments are retained by default. If Delete data on uninstall<\/strong> is enabled before uninstalling, the plugin also deletes its document records and associated current\/version attachments.<\/p><\/dd>\n\n<\/dl>\n\n\n2.0.0 (31 August 2026)<\/h4>\n\n\n- New: Signed share links now support an optional maximum-use count (0 = unlimited), a one-click \"Revoke link\" action that immediately invalidates the current link, and a \"Regenerate\" action that rotates the signing secret so all previously issued links stop working, even if they have not yet expired. These controls are available from the Documents table, edit modal, and native document editor.<\/li>\n
- New: Document versions can now include an optional label or note, such as \"2024 policy update\", when replacing a file. The Versions list now also shows who replaced each version and when.<\/li>\n
- New: Added a unified document lifecycle state \u2013 Draft, Unavailable, Scheduled, Live, Restricted, Archived, or Expired \u2013 displayed as a badge on the Documents table.<\/li>\n
- New: Added Status, Visibility, and File Type filters to the Documents table alongside the existing search box.<\/li>\n
- New: Document lifecycle state is now included in the REST metadata endpoint.<\/li>\n
- New: Added an hourly background lifecycle check that detects state transitions such as a scheduled document becoming live even when nobody visits its link, triggering the new
kitgenix_document_manager_lifecycle_status_changed<\/code> hook and a Log tab entry.<\/li>\n- New: Added an \"Access preset\" quick-fill control with Public, Logged-in Users, and Administrators Only options above the existing role, capability, and user-ID access fields on Add\/Edit document forms and modals. Presets only pre-fill the existing fields and can still be adjusted before saving.<\/li>\n
- New: Added \"Archive now\" and \"Clear lifecycle schedule\" bulk actions.<\/li>\n
- New: Added confirmation prompts before bulk-setting documents to Public or bulk-archiving documents, helping prevent accidental visibility or lifecycle changes.<\/li>\n
- New: Added a Settings \u2192 Import\/Export card for transferring plugin settings and categories between sites using JSON files. Documents, uploaded files, and analytics are intentionally excluded so private content cannot accidentally be bundled into an export.<\/li>\n
- New: Added the
kitgenix_document_manager_share_link_url<\/code> developer hook for filtering generated signed-share URLs.<\/li>\n- New: Added the
kitgenix_document_manager_document_served<\/code> developer hook for responding when a document is successfully delivered.<\/li>\n- New: Added the
kitgenix_document_manager_rest_document_response<\/code> developer hook for customising REST metadata responses.<\/li>\n- New: Added the
kitgenix_document_manager_lifecycle_status_changed<\/code> developer hook for responding to document lifecycle transitions.<\/li>\n- New: Redesigned the admin interface around the shared Kitgenix design system with a sticky topbar and grouped Documents navigation for All Documents, Categories, and Versions.<\/li>\n
- New: Added in-page settings search with \"\/\" and Cmd\/Ctrl+K keyboard shortcuts.<\/li>\n
- New: Added a light\/dark theme toggle for the admin interface.<\/li>\n
- New: Added quick links to the Kitgenix Hub and other Kitgenix plugins from the shared admin topbar.<\/li>\n
- New: Added a responsive mobile menu for Kitgenix admin navigation on narrower screens.<\/li>\n
- New: Added Image Optimizer to the Kitgenix Hub and updated the MultiStore listing to its new \"MultiStore for WooCommerce\" name.<\/li>\n
- Improved: Stable document links now support HTTP Range requests for resumable downloads, PDF\/video seeking, and download managers.<\/li>\n
- Improved: Valid single-range requests now return HTTP 206 responses with the appropriate
Content-Range<\/code> header.<\/li>\n- Improved: Malformed or multi-range requests safely fall back to a full response, while out-of-bounds ranges return HTTP 416.<\/li>\n
- Improved: Large document files continue to stream from local disk in fixed-size chunks rather than being loaded entirely into PHP memory.<\/li>\n
- Improved: Reordered the Documents tab so the All Documents list is displayed full-width at the top, with Add Document and Batch Upload moved into stacked full-width cards below instead of the previous cramped two-column layout.<\/li>\n
- Improved: Redesigned settings and document forms with toggle switches replacing checkboxes, clearer field labels and descriptions, and consistent card headers throughout the admin interface.<\/li>\n
- Improved: Unified toast notifications, collapsible cards, copy-to-clipboard controls, and table search behaviour through the shared Kitgenix component library.<\/li>\n
- Improved: The Log tab now displays entries in a searchable, paginated table containing time, context, outcome, and a plain-English note instead of a plain text block.<\/li>\n
- Improved: Failed document uploads and replacements now report the specific underlying cause, including missing permissions, disk or filesystem permission problems, disallowed file types, and database errors, instead of displaying one generic \"upload failed\" message.<\/li>\n
- Improved: Upload and replacement failures are now recorded in the Log tab for easier diagnosis.<\/li>\n
- Improved: Rejected signed document links now distinguish between expired links, links issued before a security-key rotation, and genuinely tampered or invalid links.<\/li>\n
- Improved: Expired and pre-rotation links are treated as routine conditions requiring a new link, while invalid or tampered links are logged as genuine security concerns.<\/li>\n
- Improved: Added a reference table to the Log tab explaining what each recorded category means and whether administrator action is required.<\/li>\n
- Improved: The Support tab is now three focused cards \u2013 a donate card with a collapsible monthly-amount picker, a \"what your support funds\" summary, and a \"get involved\" panel for reviews and plugin links \u2013 replacing the previous stack of donate, trust, and community cards.<\/li>\n
- Improved: Moved the Log tab directly before Support in the admin navigation for a more logical workflow.<\/li>\n
- Fix: Resolved an issue where edit-document and edit-category modals could become out of sync between their visible state and the underlying hidden attribute.<\/li>\n
- Fix: The document card shortcode no longer renders an empty or broken card when a document has no attached file.<\/li>\n
- Fix: Resolved a markup nesting issue that could cause the Documents tab to render without its sidebar and shift the page layout to the left.<\/li>\n
- Fix: Number inputs throughout the settings screens are no longer cramped to a fixed 50px width.<\/li>\n
- Security: Document files are now protected from direct access through WordPress REST media endpoints such as
\/wp\/v2\/media\/{id}<\/code> and attachment permalinks, preventing these routes from bypassing the plugin's Private, Restricted, signed-link, and scheduling access controls.<\/li>\n- Security: Added a dedicated document-media guard that blocks unauthorised single-item REST requests, excludes inaccessible attachments from REST collection queries, strips file-revealing fields as defence in depth, and returns a 404 response for protected attachment permalinks.<\/li>\n
- Security: REST and attachment-permalink protection applies to both files uploaded directly through Document Manager and files selected from the existing WordPress Media Library, without moving files or changing their existing URLs.<\/li>\n
- Security: Added
.htaccess<\/code>, web.config<\/code>, and an empty index.php<\/code> file to the plugin's dedicated uploads directory to prevent direct web access and directory listing on Apache, IIS, and compatible web servers.<\/li>\n- Security: Documents continue to stream securely from local disk through the plugin rather than being proxied directly through the protected uploads directory.<\/li>\n
- Security: Nginx installations should configure an equivalent server-level
location<\/code> rule because WordPress plugins cannot modify Nginx server configuration directly.<\/li>\n- Security: The \"Allowed file extensions\" setting is now intersected with the plugin's fixed, audited extension-to-MIME allowlist when settings are saved.<\/li>\n
- Security: Administrators are now warned when unsupported file extensions are entered or removed from the configured allowlist.<\/li>\n
- Security: Dangerous file formats, including SVG, PHP, and other executable types, remain excluded from the permitted document upload types.<\/li>\n
- Security: Hardened stable-link
Content-Disposition<\/code> headers against quote, carriage-return, and line-feed characters.<\/li>\n- Security: Added explicit
Accept-Ranges<\/code> and X-Content-Type-Options<\/code> headers to document responses.<\/li>\n- Security: REST metadata responses for Private, Restricted, or signed-link-only documents now include
Cache-Control: private, no-store<\/code>, preventing intermediary caches and CDNs from retaining sensitive document metadata.<\/li>\n- Removed: Removed the \"theme button style\" and \"full width button\" options from the document card shortcode and Frontend settings. Document card buttons now use either Outline or Solid styling.<\/li>\n
- Dev: Renamed frontend document card CSS classes from
kgx-dm-*<\/code> to kitgenix-document-manager-*<\/code> for consistency with other Kitgenix plugins. Sites with custom CSS targeting the previous class names will need to update their selectors.<\/li>\n- Dev: Refreshed the Kitgenix logo and icon asset set used across the plugin admin interface, Kitgenix Hub, and WordPress admin menu icon.<\/li>\n<\/ul>","raw_excerpt":"Manage WordPress documents with stable links, access control, signed sharing, versions, scheduling and local analytics.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/288086","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=288086"}],"author":[{"embeddable":true,"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/kitgenix"}],"wp:attachment":[{"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=288086"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=288086"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=288086"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=288086"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=288086"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/tt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=288086"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}