Description
TechnologyWisdom Upload Guard gives administrators fine-grained control over media uploads in WordPress by enforcing restrictions based on user roles.
You can define:
– Maximum upload file size (in MB)
– Maximum image width and height (in pixels)
– Allowed MIME types (JPG, PNG, WEBP, GIF, AVIF, PDF, MP4, and more)
All rules are applied before the file is uploaded, preventing unwanted or oversized files from entering your media library.
Users with multiple roles receive the strictest combined limits. MIME types are validated with WordPress filetype checks (not only the browser-reported type). A dedicated Guest setting applies to visitors who are not logged in, for example file upload fields on public forms. Upload Guard rules override supported form upload restrictions, ensuring your configured file type, size, and image dimension rules are always enforced.
Key Features
- Role-based upload restrictions with per-role enable/disable toggle
- Guest (not logged in) upload limits for public form uploads
- Upload rules enforced across Media Library uploads and supported frontend forms
- File size limits per role
- Image dimension validation (width and/or height)
- MIME type allowlist with WordPress filetype detection
- In-plugin support form and Technology Wisdom support portal integration with site owner consent
- Settings removed on uninstall
Note:
Allowing SVG is optional and risky unless you also use a trusted SVG sanitizer.
If you upload a plugin ZIP via Plugins Add New, that ZIP is blocked unless ZIP is allowed for your admin role in Upload Guard settings.
Privacy / External Service
This plugin can optionally connect to an external support service operated by Technology Wisdom.
Service: https://pluginsupport.technologywisdom.com
Terms of Use: https://pluginsupport.technologywisdom.com/terms-of-use/
Privacy Policy: https://pluginsupport.technologywisdom.com/privacy-policy/
The service is used to provide in-plugin support messaging, feedback forwarding, and announcements.
Opt-in consent (required before any connection):
When you activate the plugin, an admin notice asks whether you want to allow the support connection. You can choose Allow Support Connection or No Thanks.
- If you allow the connection, the plugin may send: site URL, site name, admin email, plugin name/version, WordPress version, and PHP version. Support requests and review/feedback details are sent only when you submit those forms. The plugin may also check weekly for announcements from Technology Wisdom.
- If you decline (or never accept), that data is not sent to the support portal. The plugin’s core feature continues to work normally without the connection.
- You are never required to allow the connection to use the plugin.
- You can disconnect the support connection at any time from the plugin’s Support page by choosing Disable priority support.
Support and rating forms also include their own consent checkboxes before site information is included with a submission.
Please review the service Terms of Use and Privacy Policy before enabling the connection.
License
This plugin is licensed under the GPL-2.0+ License.
You may use, modify, and distribute it freely under the license terms.
Full license: https://opensource.org/licenses/GPL-2.0
Screenshots


Installation
- Upload the plugin folder to
/wp-content/plugins/technologywisdom-upload-guard/ - Activate the plugin through the Plugins menu in WordPress
- Go to TechnologyWisdom Upload Guard in the admin menu
- Enable a role and configure its upload rules
- Save changes
FAQ
-
Does this affect existing media files?
-
No. The plugin only validates new uploads.
-
Does it work with the Media Library and post uploads?
-
Yes. Upload Guard checks files uploaded through the WordPress Media Library and anywhere else WordPress accepts file uploads, including posts and pages.
-
Does Upload Guard override form upload restrictions?
-
Yes. Upload Guard rules override supported form upload restrictions. Even if a form allows broad file types such as
audio/*,video/*, orimage/*, only the file types allowed in Upload Guard settings can be uploaded. -
Do image width/height limits apply to form uploads?
-
Yes. Maximum image width and height limits are enforced for Media Library uploads as well as uploads submitted through supported front end forms and custom upload fields.
-
Can I restrict uploads for guests and public forms?
-
Yes. Enable the Guest (not logged in) card in settings. Only the file types, file size, and image dimensions you allow there can be uploaded by visitors using public file upload forms. Upload Guard rules override supported form upload restrictions where applicable.
-
Can I restrict uploads for specific roles only?
-
Yes. Each role has its own configurable rules. Leave fields empty to apply no restriction.
-
Why can’t I upload a plugin ZIP from the admin?
-
If Upload Guard is enabled for your role and ZIP is not in the allowed MIME list, WordPress will block the ZIP. Allow ZIP for the Administrator role, or temporarily disable that role’s limits, before installing plugins via ZIP upload.
-
What happens if a user uploads a restricted file?
-
The upload is blocked and a clear error message is shown.
-
Does it support SVG uploads?
-
Yes, if SVG is allowed in the role’s MIME settings. SVG files can contain scripts, so only enable SVG together with a trusted SVG sanitizer plugin.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“TechnologyWisdom Upload Guard” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “TechnologyWisdom Upload Guard” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.0
- Initial release
- Role-based upload restrictions (file size, image dimensions, MIME types)
- Guest upload limits for logged-out visitors and public form uploads
- Top-level admin menu with Settings, Tutorial, and Support
- In-plugin support form and rating feedback options
