This plugin can be used to prevent direct access to WordPress uploads.

Manage and protect your downloads in WordPress with secure access, categories, and powerful file sharing.

Manage WordPress documents with stable links, access control, signed sharing, versions, scheduling and local analytics.