This plugin expands file-related security and sanity around the upload process.
As of April 2026, Lord of the Files: Enhanced Upload Security is a WordPress SVG plugin with 1.0K+ active installations and a 5/5 rating from 11 reviews. It has been downloaded 95K+ times in total. Requires WordPress 5.2+ and PHP 7.4+. Available on WordPress.org since 2017. Downloads are down 18% this week. Top alternative: Safe SVG.
WordPress relies mostly on name-based validation when deciding whether or not to allow a particular file, leaving the door open for various kinds of attacks.
Lord of the Files adds to this content-based validation and sanitizing, making sure that files are what they say they are and safe for inclusion on your site.
The main features include:
4.7.1.dom PHP extension.fileinfo PHP extension.mbstring PHP extension.xml PHP extension.Please note: it is not safe to run W…
This fixed an issue we were having where a valid font type wasn’t uploading. Thank you.
After trying every kind of edit recommended in StackExchange to wp-config & functions.php, adding another plugin (WP Extra File Types), looking through log files, being on the phone for an hour with WP Engine, Gravity Forms pointed me to this, and instantly, the file upload for adobe illustrator files worked. I tried disabling WP Extra File Types, but apparently that is still required.
Update comes to fixed the issue very quickly after reporting
Excellent plugin. Even if the description doesn’t say it, this plugin allows AVIF file uploads in WordPress in two steps:
– Add functions.php support for AVIF mime types (in child theme if possible): easy procedure with lots of tutorials available.
– Install “Lord of the Files”
Now you can upload AVIF in WordPress Media manager.
To the authors: Thank you! The plugin description does not mention AVIF or other new image formats. It would be useful to a lot of users!
WordPress was falsely detecting a perfectly valid MP4 file with the “Sorry, this file type is not permitted for security reasons” whereas it had no problems letting me upload other MP4 files. I was told that this plugin has a decent chance at solving that problem and to my surprise it did!!! Nice work on the plugin guys. Job well done solving WordPress’ own faults.
| WordPress | 5.2+ requiredTested up to 6.8.5 |
| PHP | 7.4+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.