Skip to content
Vorelo

Vorelo Free · Setup guide

A working board,
one step at a time.

Start on staging with test data. This guide covers the WordPress.org edition and the CV storage behavior introduced in 1.8.2.

1. Install and activate

Check that the site runs WordPress 6.9 or later and PHP 8.2 or later. Back up an existing site before installing or updating plugins.

  1. In WordPress admin, open Plugins → Add New.
  2. Search for Vorelo — Two-Way Job Board. You can also download it from WordPress.org and use Upload Plugin.
  3. Install and activate. The plugin creates its required pages and candidate/employer roles automatically.

WooCommerce, a license key and extra job-board add-ons are not required for the Free edition.

2. Protect the CV storage

Check this before uploading real CVs. The plugin's permission checks protect intended downloads. Your web server must also block direct requests to stored CV files.

New vaults use wp-content/uploads/vorelo/. Existing configured vaults under wp-content/uploads/matchwork/ stay in place; the plugin does not automatically move them.

Apache uses the plugin's .htaccess protections. Nginx ignores .htaccess: ask your host to add these rules to the appropriate server block, adapting the URLs if your uploads location is customized.

location ^~ /wp-content/uploads/vorelo/ {
    deny all;
    return 404;
}

location ^~ /wp-content/uploads/matchwork/ {
    deny all;
    return 404;
}

Have your host verify the active configuration with a harmless test file: an unauthenticated direct request beneath either protected URL should return 403 or 404, not the file. Also verify that an authorized plugin-mediated download still works. Do not test using a real candidate's CV.

A backup plan should include the database and protected CV files. Do not expose the vault through a public file browser or backup URL.

3. Make the pages easy to find

  1. Add the generated Choose your path and Job listings pages to the site's menu.
  2. Open Vorelo → Settings and set your Privacy Policy URL. Review the site's policy before collecting real applicant information.
  3. Review the city, role, contract and shift terms. Generic roles, contracts and shifts are seeded on activation; add terms that fit your audience.
  4. Check that the generated pages open correctly using your site's permalink configuration.

For existing WordPress users, use the plugin's candidate/employer role-activation flow rather than creating a second account for the same person. Test this with a non-administrator account before inviting users.

4. Match your site's identity

In the plugin settings, open Appearance to adjust colors, typography, button shapes, card styles, spacing and corner radii.

Open Static messages → Hero to edit the Choose your path headline and introduction. Other text overrides are not included in the Free edition.

For deeper styling changes, use WordPress's Additional CSS tool with the plugin's included CSS variable and class reference. The built-in settings do not replace custom CSS for every possible layout.

Check the result on a narrow mobile viewport as well as desktop, especially navigation, filters and action buttons.

5. Test both directions

Create separate employer and candidate test accounts. Use fictional data and a non-sensitive sample document.

  1. As the employer, publish a job.
  2. As the candidate, publish a profile, find the job and save it. Check the saved-jobs dashboard tab.
  3. Send an application and review it in the employer dashboard. Check the status and history.
  4. On another suitable test opportunity, send a proposal from the employer to the candidate.
  5. Verify that contact details remain hidden before acceptance and become available to the relevant participants after acceptance. Test the authorized CV download.
  6. Check transactional email delivery. Investigate hosting/mail configuration if messages do not arrive.

Each relationship has its own state. Removing an item from your archive is not the same as reversing a rejection. Use the displayed history to understand what changed.

Deleting the plugin is destructive. Vorelo's uninstall removes its records, generated pages, settings, role data and CV files. Back up first; deactivation is not the same as deletion.

6. Tell us where you got stuck

Use the Vorelo support forum for questions, reproducible bugs and feedback.

  • Include WordPress, PHP and plugin versions, plus the theme.
  • Describe the steps, expected result and actual result.
  • Use redacted screenshots and synthetic examples.
  • Never post passwords, access tokens, CVs, email addresses or private application messages. Do not publish exploit details or sensitive security reports in a public thread.

This website is documentation, not a hosted job board or an interactive WordPress demo.