WP Manifestindependent plugin directory

Install

Download shooters-hub-wp-1.0.2.zip From the v1.0.2 release on GitHub, Jul 5, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/fortneymanufacturingllc/shooters-hub-wp/releases/download/v1.0.2/shooters-hub-wp-1.0.2.zip
Updates itself. It ships its own updater (Update URI header), so new versions appear under Dashboard → Updates.

Shooters Hub WordPress Plugin

Embed the Shooters Hub Match Finder and Club Finder inside WordPress. The plugin ships with shortcodes and Gutenberg blocks, and proxies API traffic through WordPress so your API key stays server-side.

Features

  • Match Finder and Club Finder powered by the same finder components used in the Shooters Hub web app
  • OLC index/tile API support via WordPress REST proxy
  • Global defaults in WP admin + per-instance shortcode/block overrides
  • Optional Match Finder and Club Finder pages provisioned on activation
  • Built-in Fortney native updater via fe-plugin-core

Installation

  1. Download the latest release ZIP from the button above.
  2. In the WordPress admin, navigate to Plugins → Add New → Upload Plugin and upload the ZIP.
  3. Activate “Shooters Hub”.
  4. Configure Settings → Shooters Hub with your API base URL and key.
  5. Add either finder block/shortcode to any page.

Development

Install dependencies from the monorepo root:

npm install

Build the production bundle:

npm run build --workspace=wp-plugin

The build emits build/match-finder.js and build/match-finder.css, which are registered automatically by the plugin.

Shortcodes

  • [shooters_hub_match_finder]
  • [shooters_hub_club_finder]

Releasing

  1. Bump the version in both files:
    • shooters-hub.php (Version: and SH_PLUGIN_VERSION)
    • readme.txt (Stable tag)
  2. Commit and merge to main.
  3. Create and push a tag matching that version, for example v1.0.2.
  4. The repo release workflow calls the reusable template in fortney-updates to:
    • validate version consistency against the tag
    • install Composer dependencies (including fe-plugin-core)
    • build the plugin ZIP artifact
    • attach artifact to GitHub release
    • optionally publish metadata to updates.fortneymfg.com

License

GPL-2.0-or-later. See license.txt.

Releases

8 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.0.2 latest
Jul 5, 2026 3mo ago
shooters-hub-wp-1.0.2.zip
3
Jul 4, 2026 3mo ago
shooters-hub-wp-1.0.1.zip
0
Feb 19, 2026 8mo ago
shooters-hub-0.1.4.zip
2
Feb 19, 2026 8mo ago
shooters-hub-0.1.3.zip
5
Feb 19, 2026 8mo ago
shooters-hub-0.1.2.zip
2
Feb 19, 2026 8mo ago
tag only
—
Feb 19, 2026 8mo ago
tag only
—
Feb 18, 2026 8mo ago
tag only
—
C- grade

Security

Shooters Hub 1.0.2 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.0.2
Findings
1
Worst severity
high
Content hash
bbdfcee8bf795757cc2e2e10…

Findings

  • high Unauthenticated authenticated-proxy to upstream API using site API key

    missing_permission_callback

    RestProxy::register_routes uses permission_callback __return_true for /proxy endpoints. handle() loads api_key from options and wp_remote_request() to api_base + attacker path/query with attacker POST body and Bearer token. Unauthenticated users can invoke the privileged upstream API and receive responses (and error bodies including URL).

    inc/RestProxy.php:8-127

    Recommendation

    Require authentication and capability; allowlist paths/methods; never expose a generic proxy with the site API key.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.