MimeCraft MIME Unlocker
| 开发者 | akashahmed29 |
|---|---|
| 更新时间 | 2026年6月2日 14:35 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
MimeCraft MIME Unlocker helps you safely extend the default WordPress upload functionality by enabling additional file types such as SVG, JSON, fonts, and more.
WordPress restricts file uploads for security reasons. This plugin provides a user-friendly interface to manage allowed MIME types while maintaining security best practices.
Whether you're a developer, designer, or site administrator, MimeCraft gives you control over file uploads—without editing code.
安装:
- Upload the plugin folder to
/wp-content/plugins/. - Activate the plugin through the 'Plugins' menu in WordPress.
常见问题:
What file types can I upload to WordPress by default?
By default, WordPress allows only a limited set of file types for security reasons. Learn more here: https://codex.wordpress.org/Uploading_Files
Can I upload SVG files?
Yes, this plugin allows SVG uploads. For best security, ensure SVG files are sanitized before use.
Can I add custom MIME types?
Yes, you can add and manage custom MIME types directly from the plugin interface.
Does this plugin allow all file types?
No. For security reasons, dangerous file types such as executable or script files are blocked.
Will this plugin affect existing uploads?
No, it only controls which file types are allowed moving forward.
更新日志:
1.0.1
- Security: Prevented upload of insecure MIME types (exe, js, apk, etc.) for non-admin users
- Security: Added role-based upload control (unsafe file types allowed for admins only)
- Security: Implemented real MIME type validation using finfo (anti-spoof protection)
- Security: Added SVG sanitization to prevent XSS and malicious code injection
- Fix: Resolved issue where default MIME types were not working when blocklist was enabled
- Fix: Corrected invalid MIME type mappings (woff, xml, css, js, etc.)
- Improvement: Improved validation and sanitization of custom MIME types
- Improvement: Strengthened WordPress core file type verification using wp_check_filetype_and_ext filter
- Initial Release