Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Lord of the Files: Enhanced Upload Security
This plugin expands file-related security and sanity around the upload process.
The facts
- Rating
- 5★ from 11
- Active installs
- 1k+
- Price
- Free
- Last updated
- 19 Aug 2026
- Added
- Mar 2017
- Requires WP
- 5.2
- Tested up to
- WP 7.1
- Requires PHP
- 7.4
- Downloads
- 101,687
Our analysis
AI-assistedLord of the Files: Enhanced Upload Security is a WordPress plugin designed to improve the security of file uploads. It enhances the default name-based validation in WordPress by implementing content-based validation and sanitisation, ensuring that uploaded files are safe and genuine.
This plugin is suitable for users who require additional security measures for file uploads, particularly those who allow SVG files. It addresses known issues in previous WordPress versions and provides tools for debugging file upload validation.
Best for: This plugin suits WordPress users who need enhanced security for file uploads.
What it does well
- ✓Enhances file upload security with content-based validation
- ✓Includes robust real filetype detection
- ✓Supports SVG sanitisation when allowed
- ✓Fixes known issues from previous WordPress versions
- ✓Free to use from the WordPress.org directory
Where it falls short
- •Requires specific PHP extensions to function
- •Limited information on user experience or support
Verdict
Lord of the Files provides valuable security enhancements for file uploads, particularly for sites that allow SVG files. It is a useful tool for those concerned about upload safety.
From the developer
Blobfolio's own description of Lord of the Files: Enhanced Upload Security, lightly tidied.
WordPress relies mostly on name-based validation when deciding whether or not to allow a particular file, leaving the door open for various kinds of attacks.
Lord of the Files adds to this content-based validation and sanitizing, making sure that files are what they say they are and safe for inclusion on your site.
The main features include:
- Robust real filetype detection;
- Full MIME alias mapping;
- SVG sanitization (if SVG uploads have been independently allowed);
- File upload validation debugger;
- Fixes issues related to #40175 that have been present since WordPress
4.7.1. - Fixes ambiguous media extensions #40921
Requirements
- WordPress 5.2 or later.
- PHP 7.4 or later.
domPHP extension.fileinfoPHP extension.mbstringPHP extension.xmlPHP extension.
Please note: it is not safe to run WordPress atop a version of PHP that has reached its End of Life. Future releases of this plugin might, out of necessity, drop support for old, unmaintained versions of PHP. To ensure you continue to receive plugin updates, bug fixes, and new features, just make sure PHP is kept up-to-date. 🙂
Privacy Policy
This plugin does not make use of or collect any “Personal Data”.
Tagged as
purpose
Security & Malware Protection
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)