sandywp / plugins / restrict-wp-upload-type
Restrict WP Upload Type
Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress.
Ready in seconds.
v1.1.0 300+ installs WP 5.6+ PHP 7.4+

What you get inside
1 screen-
All Settings in One page.
About this plugin
Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress. Prevent security risks, maintain brand standards, and eliminate media library chaos with granular file type controls.
Why You Need Upload Restrictions
Uncontrolled uploads create serious problems:
- Security vulnerabilities from unvetted file types
- Brand inconsistency from mixed formats
- Media library bloat from oversized files
- Wasted time managing user uploads
- Compliance violations with upload policies
What This Plugin Does
- Control over 97 file extensions and MIME types
- Allow or block any format with a single click
- Dedicated SVG file management with security
- Real-time upload validation (prevents bad uploads before they happen)
- Clear, customizable file type error messages guiding users to approved formats
- Global file size limit controls
- Zero configuration complexity—works instantly
Who Should Use This
- WordPress site owners wanting better media management
- Teams needing consistent upload policies
- Digital agencies managing multiple client sites
- Organizations with compliance requirements
- Anyone managing user permissions on WordPress
Key Features
- Comprehensive Format Support: Images (PNG, JPG, GIF, WebP, SVG, HEIC), Documents (PDF, DOCX, XLSX, PPT), Audio/Video (MP3, MP4, WAV, AVI), Archives (ZIP, RAR, 7Z), and more
- Flexible Controls: Whitelist allowed formats or blacklist restricted ones
- SVG Security: Dedicated toggle for SVG files with proper MIME type handling
- Lightweight Design: Minimal server overhead, zero performance impact
- User Feedback: Clear, customizable messages when file type uploads are blocked
- File Size Limits: Set a global maximum upload size from the plugin settings
- WordPress Integrated: Works with Gutenberg, classic editor, REST API uploads, and block-based themes
How It Works
- Install and activate the plugin
- Visit Media > Restrict Files
- Check the boxes for file types you want to allow
- Click Save
- Done! Your restrictions are immediately active
Performance Impact
This plugin adds minimal overhead. It uses lightweight MIME type filtering without database bloat. Your site’s speed remains unaffected.
Future Roadmap
We’re actively developing Restrict WP Upload Type based on user feedback. Planned features include role-based restrictions, custom MIME management, and upload logs.
Support
Have questions? Visit our support forum on WordPress.org. We’re here to help!
Learn More
Donate link
- If you’d like to support development, please visit https://profiles.wordpress.org/kushang78/
What about security?
The plugin validates both file extensions and MIME types server-side to prevent header manipulation. It follows WordPress security best practices and standards.
Can I override the restrictions for specific users?
Not in the current version. The plugin applies restrictions globally. This feature is being considered for future versions.
How often is this plugin updated?
The plugin is actively maintained and updated as needed for WordPress compatibility and bug fixes. Subscribe to the support forum for update notifications.
What if I find a bug?
Please report issues in the support forum:
https://wordpress.org/support/plugin/restrict-wp-upload-type/
We take all bug reports seriously and work to fix them promptly.
Does this plugin work with multisite?
Yes, it’s fully compatible with WordPress multisite. Each site in the network can have its own upload restrictions.
Can I test the plugin on a staging site first?
Absolutely! We recommend testing on a staging/development site first, then deploying to production.
Questions
- How many file types does this plugin support?
Restrict WP Upload Type supports 97 file extensions with their corresponding MIME types. This includes:
* Images: PNG, JPG, GIF, WebP, SVG, HEIC, BMP, TIFF, ICO, JPEG
* Documents: PDF, DOCX, DOC, XLSX, XLS, PPTX, PPT, ODT, ODP, ODS
* Audio: MP3, WAV, M4A, FLAC, OGG, AAC, WMA, AIFF
* Video: MP4, AVI, MOV, WMV, FLV, MKV, WEBM, 3GP
* Archives: ZIP, RAR, 7Z, TAR, GZ, BZ2, CAB
* And many more…- Will this affect my existing uploaded files?
No. This plugin only controls new uploads. Previously uploaded files are unaffected and remain accessible.
- Does this plugin support SVG files?
Yes! SVG files have a dedicated toggle in the plugin settings. This allows you to independently control SVG uploads with proper MIME type validation and security considerations.
- What happens when someone tries to upload a blocked file?
They receive a clear, user-friendly error message indicating the file type isn’t allowed. You can customize this file type message from Media > Restrict Files.
Example: “Upload blocked by Restrict WP Upload Type. This file type is not allowed on this site.”
- Is this plugin multisite compatible?
Yes. Restrict WP Upload Type works with WordPress multisite installations. Each site can maintain independent upload restrictions.
- Does this plugin slow down my website?
No. The plugin uses lightweight MIME type filtering with minimal server overhead. Performance impact is negligible—your site’s speed remains virtually unchanged.
- Can I restrict uploads for specific user roles?
The current version applies restrictions globally to all users. For role-based restrictions, consider combining with user role management plugins. This feature is on our roadmap for future versions.
- Where are the plugin settings stored?
Settings are stored in your WordPress options table (wp_options). When you uninstall the plugin, all settings are removed. You can backup your configuration through WordPress backup solutions.
sandywp / also on the shelf
Try another plugin
3.4 · 40K+ installs
Plugin to let you extend the list of allowed file types supported by the Wordpress Media Library
3.8 · 10K+ installs
Add the mime type that can be used in the media library to each file type.
200+ installs
WP Media File Type Manager will allow you to manage different file types in Media Library.
Spin up a real WordPress site in seconds.
Test plugins, build a demo, hand a client a link — then squash it and start again. No local setup, no Docker.