WordPress relies mostly on name-based validation when deciding whether or not to allow a particular file, leaving the door open for various kinds of attacks. Lord of the Files adds to this content-based validation and sanitizing, making sure that files are what they say they are and safe for inclusion on your site. The main features include: Robust real filetype detection; Full MIME alias mapping; SVG sanitization (if SVG uploads have been independently allowed); File upload validation debugger; Fixes issues related to #40175 that have been present since WordPress 4.7.1. Fixes ambiguous media...
Read the full description on WordPress.org →
