BLACK FRIDAY
Save 59% on PageForge Annual $191/year $485/year
Claim 59% Off →
Restrict WP Upload Type icon
Actively maintained Tested up to 7.0.6 #3 in file type

Restrict WP Upload Type

Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress.

Active installs300+100+ tier
Downloads · 30d201▼ -3.8% vs prev. 30d
Rating5/54 reviews
Health score56/100Fair
All-time downloads5.5KSince Apr 2022
Support resolved0 / 10% in last 2 months
RequiresWP 5.6PHP 7.4+
Downloads · 7d45▼ -26.2% week over week
Our verdict

Use with caution

Restrict WP Upload Type works, but test it on a staging site before relying on it in 2026. It runs on 300+ sites, is rated 5/5 and was last updated 3 months ago, and scores 56/100 on our health check.

  • Small user base (300+ active installs)
  • Very few reviews so far

How does it stack up?

Side-by-side on installs, updates, ratings & support

Daily downloads

285684Jun 29Aug 12Sep 26
Yesterday9
Daily average (1y)5
Peak day112Jul 8, 2026
Last 12 months1.9K

Download spikes usually follow a new release — each site that auto-updates counts as a download.

Rankings

Where Restrict WP Upload Type stands today

WordPress.org search rankings

Live position in the plugin search, top 100
KeywordPositionCompeting pluginsCategory
file type #27 10,000 Best file type plugins →
media >100 10,000 Best media plugins →
mime #19 711 Best mime plugins →
security >100 10,000 Best security plugins →
upload restrictions #8 2,115 Best upload restrictions plugins →

Version adoption

Share of active sites per release.

  • 1.164.3%
  • 1.035.7%

Rating breakdown

★★★★★★★★★★ 5 from 4 reviews

  • 5★100.0%
  • 4★0.00%
  • 3★0.00%
  • 2★0.00%
  • 1★0.00%

About Restrict WP Upload Type

From the official readme · v1.1.0

Description

Restrict WP Upload Type gives you complete control over which files your users can upload to WordPress. Prevent security risks, maintain brand standards, and eliminate media library chaos with granular file type controls.

Why You Need Upload Restrictions

Uncontrolled uploads create serious problems:

  • Security vulnerabilities from unvetted file types
  • Brand inconsistency from mixed formats
  • Media library bloat from oversized files
  • Wasted time managing user uploads
  • Compliance violations with upload policies

What This Plugin Does

  • Control over 97 file extensions and MIME types
  • Allow or block any format with a single click
  • Dedicated SVG file management with security
  • Real-time upload validation (prevents bad uploads before they happen)
  • Clear, customizable file type error messages guiding users to approved formats
  • Global file size limit controls
  • Zero configuration complexity—works instantly

Who Should Use This

  • WordPress site owners wanting better media management
  • Teams needing consistent upload policies
  • Digital agencies managing multiple client sites
  • Organizations with compliance requirements
  • Anyone managing user permissions on WordPress

Key Features

  • Comprehensive Format Support: Images (PNG, JPG, GIF, WebP, SVG, HEIC), Documents (PDF, DOCX, XLSX, PPT), Audio/Video (MP3, MP4, WAV, AVI), Archives (ZIP, RAR, 7Z), and more
  • Flexible Controls: Whitelist allowed formats or blacklist restricted ones
  • SVG Security: Dedicated toggle for SVG files with proper MIME type handling
  • Lightweight Design: Minimal server overhead, zero performance impact
  • User Feedback: Clear, customizable messages when file type uploads are blocked
  • File Size Limits: Set a global maximum upload size from the plugin settings
  • WordPress Integrated: Works with Gutenberg, classic editor, REST API uploads, and block-based themes

How It Works

  1. Install and activate the plugin
  2. Visit Media > Restrict Files
  3. Check the boxes for file types you want to allow
  4. Click Save
  5. Done! Your restrictions are immediately active

Performance Impact

This plugin adds minimal overhead. It uses lightweight MIME type filtering without database bloat. Your site’s speed remains unaffected.

Future Roadmap

We’re actively developing Restrict WP Upload Type based on user feedback. Planned features include role-based restrictions, custom MIME management, and upload logs.

Support

Have questions? Visit our support forum on WordPress.org. We’re here to help!

Learn More

Donate link

  • If you’d like to support development, please visit https://profiles.wordpress.org/kushang78/

What about security?

The plugin validates both file extensions and MIME types server-side to prevent header manipulation. It follows WordPress security best practices and standards.

Can I override the restrictions for specific users?

Not in the current version. The plugin applies restrictions globally. This feature is being considered for future versions.

How often is this plugin updated?

The plugin is actively maintained and updated as needed for WordPress compatibility and bug fixes. Subscribe to the support forum for update notifications.

What if I find a bug?

Please report issues in the support forum:
https://wordpress.org/support/plugin/restrict-wp-upload-type/

We take all bug reports seriously and work to fix them promptly.

Does this plugin work with multisite?

Yes, it’s fully compatible with WordPress multisite. Each site in the network can have its own upload restrictions.

Can I test the plugin on a staging site first?

Absolutely! We recommend testing on a staging/development site first, then deploying to production.

Installation

Method 1: Direct Installation (Recommended)

  1. Log into your WordPress admin panel
  2. Go to Plugins → Add New
  3. Search for “Restrict WP Upload Type”
  4. Click Install Now
  5. Click Activate
  6. Visit Media > Restrict Files to configure your upload restrictions

Installation takes less than 1 minute.

Method 2: Manual Installation (FTP)

  1. Download the plugin from WordPress.org
  2. Unzip the downloaded file
  3. Upload the restrict-wp-upload-type folder to /wp-content/plugins/ via FTP
  4. Log into WordPress and go to Plugins
  5. Find “Restrict WP Upload Type” in the list
  6. Click Activate
  7. Configure via Restrict Files page

Getting Started

After activation:
1. Navigate to Media > Restrict Files in your WordPress admin
2. Review the list of 97 file types
3. Check the boxes for formats you want to allow (uncheck to restrict)
4. Click Save Changes
5. Your upload restrictions are immediately active

That’s it! Wrong formats will now be blocked with a clear error message.

Need Help?

  • Check the FAQ section below
  • Visit the support forum: https://wordpress.org/support/plugin/restrict-wp-upload-type/

Frequently asked questions

How many file types does this plugin support?

Restrict WP Upload Type supports 97 file extensions with their corresponding MIME types. This includes: * Images: PNG, JPG, GIF, WebP, SVG, HEIC, BMP, TIFF, ICO, JPEG * Documents: PDF, DOCX, DOC, XLSX, XLS, PPTX, PPT, ODT, ODP, ODS * Audio: MP3, WAV, M4A, FLAC, OGG, AAC, WMA, AIFF * Video: MP4, AVI, MOV, WMV, FLV, MKV, WEBM, 3GP * Archives: ZIP, RAR, 7Z, TAR, GZ, BZ2, CAB * And many more

Will this affect my existing uploaded files?

No. This plugin only controls new uploads. Previously uploaded files are unaffected and remain accessible.

Does this plugin support SVG files?

Yes! SVG files have a dedicated toggle in the plugin settings. This allows you to independently control SVG uploads with proper MIME type validation and security considerations.

What happens when someone tries to upload a blocked file?

They receive a clear, user-friendly error message indicating the file type isn’t allowed. You can customize this file type message from Media > Restrict Files. Example: “Upload blocked by Restrict WP Upload Type. This file type is not allowed on this site.”

Is this plugin multisite compatible?

Yes. Restrict WP Upload Type works with WordPress multisite installations. Each site can maintain independent upload restrictions.

Does this plugin slow down my website?

No. The plugin uses lightweight MIME type filtering with minimal server overhead. Performance impact is negligible—your site’s speed remains virtually unchanged.

Can I restrict uploads for specific user roles?

The current version applies restrictions globally to all users. For role-based restrictions, consider combining with user role management plugins. This feature is on our roadmap for future versions.

Where are the plugin settings stored?

Settings are stored in your WordPress options table (wp_options). When you uninstall the plugin, all settings are removed. You can backup your configuration through WordPress backup solutions.

Does this plugin support file size limitations?

Yes. You can set a global maximum file size in MB from Media > Restrict Files. Use 0 to follow your server and WordPress upload limits.

Can I use this with WooCommerce?

Yes. The plugin will apply file restrictions to WooCommerce product uploads as well. Configure the allowed file types in the plugin settings.

What’s the difference between “allowing” and “restricting” types?

Allow: Check boxes for formats you want to permit. All others are blocked. Restrict: In future versions, we’ll add an option to specify blocked formats while allowing everything else. Currently, the plugin works on an “allow” basis for security.

Is there a pro or premium version?

Restrict WP Upload Type is 100% free with no upsells or premium tier. All features are available to every user.

How do I get support?

Check this FAQ section Visit the support forum: https://wordpress.org/support/plugin/restrict-wp-upload-type/ Review the plugin settings after installation

Changelog

Adds Media menu placement, file size limits, customizable upload block messages, and extension search/filter controls.

1.1.0 (July 07, 2026)

  • Added Restrict Files under the WordPress Media menu
  • Added global maximum file size restriction
  • Added customizable blocked file type message
  • Improved blocked upload validation before WordPress shows the generic security error
  • Added settings search and enabled/disabled extension filters
  • Added nonce protection to the settings form
  • Added uninstall cleanup for new settings

1.0.4 (May 24, 2026)

  • Added support for .json and .epub upload types
  • Improved plugin cleanup during deactivation and uninstall
  • Converted admin settings JavaScript to vanilla JavaScript
  • Updated plugin version and readme metadata

1.0.3 (December 27, 2024)

  • Fixed: Checkbox design improvements for better usability
  • Fixed: MIME type value selection issue after form submission
  • Improved: Overall UI responsiveness

1.0.2 (December 3, 2023)

  • Fixed: SVG MIME type validation and handling
  • Fixed: Multiple minor bugs and edge cases
  • Improved: Error message clarity

1.0.1 (Previous)

  • Bug fixes and minor improvements

1.0.0 (April 14, 2022)

  • Initial Release: Core functionality for file type restrictions
  • 97 file types supported
  • SVG file management
  • WordPress media library integration

Full changelog on WordPress.org →

Screenshots

All Settings in One page.
All Settings in One page.

For developers

Is this your plugin? Show off the numbers.

Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.

Active installs badge Rating badge Health score badge

Best Restrict WP Upload Type alternatives

All file type plugins →

FAQ

Restrict WP Upload Type: quick answers

Straight answers, pulled from live WordPress.org data.

Live data from WordPress.org · checked Sep 27, 2026

Is Restrict WP Upload Type free?

Yes. Restrict WP Upload Type is free to download and use from the official WordPress.org plugin directory.

Is Restrict WP Upload Type safe to use in 2026?

Restrict WP Upload Type works, but test it on a staging site before relying on it in 2026. It runs on 300+ sites, is rated 5/5 and was last updated 3 months ago, and scores 56/100 on our health check.

How many websites use Restrict WP Upload Type?

Restrict WP Upload Type is active on 300+ WordPress websites and has been downloaded 5,506 times since it launched in April 2022. It was downloaded 201 times in the last 30 days.

Does Restrict WP Upload Type work with WordPress 7.1?

Restrict WP Upload Type is officially tested up to WordPress 7.0.6, while the latest release is 7.1.2. It may still work, but try it on a staging site first.

What PHP version does Restrict WP Upload Type need?

Restrict WP Upload Type requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.

When was Restrict WP Upload Type last updated?

The latest version, 1.1.0, was released on July 8, 2026 (3 months ago).

Who makes Restrict WP Upload Type?

Restrict WP Upload Type is developed and maintained by Kushang Tailor.

What are the best alternatives to Restrict WP Upload Type?

The most popular alternatives to Restrict WP Upload Type are WP Extra File Types (40K+ installs), Mime Types Plus (10K+ installs) and WP Media File Type Manager (200+ installs).

Powered by PageForge

Want thousands of pages that rank like these? Build them in an afternoon.

This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.

  • CSV, Google Sheets & API data sources
  • AI content, schema & internal links per page
  • Works with Elementor, Gutenberg, Yoast & Rank Math
  • Free on WordPress.org — no credit card
Sarah is here to help!
Hi there! 👋 Need help finding what you're looking for?
Sarah
Sarah
Online & Ready to Help
Hi there! 👋 Need help finding what you're looking for?

We'll use this to continue our conversation

Just now ✓ Verified

Join 500+ SEO Pros Scaling Their Strategy

Get exclusive programmatic SEO tactics, AI content workflows, and the latest PageForge updates delivered straight to your inbox. Stay ahead of the algorithm.

We care about your data in our privacy policy.