WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Kushang Tailor v1.1.0

Restrict WP Upload Type

Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress.

Restrict WP Upload Type

The facts

Rating
5★ from 4
Active installs
300+
Price
Free
Last updated
8 Jul 2026
Added
Apr 2022
Requires WP
5.6
Tested up to
WP 7.0.4
Requires PHP
7.4
Downloads
5,313

Our analysis

AI-assisted

Restrict WP Upload Type is a WordPress plugin that allows you to control which file types users can upload to your site. It offers the ability to allow or block over 97 file extensions and MIME types, helping to enhance security and maintain consistency in media uploads.

This plugin is suitable for WordPress site owners, digital agencies, and teams that require strict upload policies or need to manage user permissions. It provides real-time upload validation and customizable error messages, ensuring users are guided towards approved formats.

Best for: This plugin suits WordPress site owners and digital agencies needing to manage user uploads effectively.

What it does well

  • Allows control over 97 file extensions and MIME types
  • Provides real-time upload validation
  • Customizable error messages for users
  • Minimal server overhead and performance impact
  • Works with Gutenberg and block-based themes

Where it falls short

  • Limited information on future features
  • No mention of support options

Verdict

Restrict WP Upload Type offers a straightforward solution for managing file uploads on WordPress, making it a practical choice for those prioritising security and organisation.

From the developer

Kushang Tailor's own description of Restrict WP Upload Type, lightly tidied.

Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress. Prevent security risks, maintain brand standards, and eliminate media library chaos with granular file type controls.

Why You Need Upload Restrictions

Uncontrolled uploads create serious problems:

  • Security vulnerabilities from unvetted file types
  • Brand inconsistency from mixed formats
  • Media library bloat from oversized files
  • Wasted time managing user uploads
  • Compliance violations with upload policies

What This Plugin Does

  • Control over 97 file extensions and MIME types
  • Allow or block any format with a single click
  • Dedicated SVG file management with security
  • Real-time upload validation (prevents bad uploads before they happen)
  • Clear, customizable file type error messages guiding users to approved formats
  • Global file size limit controls
  • Zero configuration complexity—works instantly

Who Should Use This

  • WordPress site owners wanting better media management
  • Teams needing consistent upload policies
  • Digital agencies managing multiple client sites
  • Organizations with compliance requirements
  • Anyone managing user permissions on WordPress

Key Features

  • Comprehensive Format Support: Images (PNG, JPG, GIF, WebP, SVG, HEIC), Documents (PDF, DOCX, XLSX, PPT), Audio/Video (MP3, MP4, WAV, AVI), Archives (ZIP, RAR, 7Z), and more
  • Flexible Controls: Whitelist allowed formats or blacklist restricted ones
  • SVG Security: Dedicated toggle for SVG files with proper MIME type handling
  • Lightweight Design: Minimal server overhead, zero performance impact
  • User Feedback: Clear, customizable messages when file type uploads are blocked
  • File Size Limits: Set a global maximum upload size from the plugin settings
  • WordPress Integrated: Works with Gutenberg, classic editor, REST API uploads, and block-based themes

How It Works

  1. Install and activate the plugin
  2. Visit Media > Restrict Files
  3. Check the boxes for file types you want to allow
  4. Click Save
  5. Done! Your restrictions are immediately active

Performance Impact

This plugin adds minimal overhead. It uses lightweight MIME type filtering without database bloat. Your site’s speed remains unaffected.

Future Roadmap

We’re actively developing Restrict WP Upload Type based on user feedback. Planned features include role-based restrictions, custom MIME management, and upload logs.

Read the full description on the official page →

Tagged as

Alternatives

Other plugins for securing a site.

Really Simple Security

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...

Free 3M+ installs 4.9★ (8,862)
Wordfence Security

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....

Free 5M+ installs 4.7★ (4,983)
Akismet Anti-spam: Spam Protection

The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...

Free 5M+ installs 4.7★ (1,186)
Loginizer

Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.

Free 1M+ installs 4.8★ (1,030)
Safe SVG

Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.

Free 1M+ installs 4.9★ (79)
All-In-One Security

Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...

Free 1M+ installs 4.7★ (1,715)