Sergey Biryukov

Recent minor updates for WordPress introduced a couple of regressions when uploading audio and video files:
<ul>
<li>
On WordPress 4.3.x and earlier branches, audio/video files cannot be uploaded at all due to a fatal error.
Full list of affected versions: 3.7.19, 3.8.19, 3.9.17, 4.0.16, 4.1.16, 4.2.13, 4.3.9.
This will be fixed in the next minor update, see the <a href="https://core.trac.wordpress.org/ticket/40085" rel="nofollow ugc">Trac ticket #40085</a>.
</li>
<li>
On WordPress 4.4.x and later branches, audio/video files are uploaded with corrupted thumbnails.
Full list of affected versions: 4.4.8, 4.5.7, 4.6.4, 4.7.3.
This will be fixed in the next minor update, see the <a href="https://core.trac.wordpress.org/ticket/40075" rel="nofollow ugc">Trac ticket #40075</a>.
</li>
</ul>
In the meantime, this plugin is a workaround that solves both issues and restores the upload functionality for audio and video files.
Don’t forget to remove the plugin once the next minor WordPress update is available!

Correct Audio/Video Uploads

Restores the ability to upload audio & video files in recent minor WordPress updates.

Blobfolio

WordPress relies mostly on name-based validation when deciding whether or not to allow a particular file, leaving the door open for various kinds of attacks.
Lord of the Files adds to this content-based validation and sanitizing, making sure that files are what they say they are and safe for inclusion on your site.
The main features include:
<ul>
<li>Robust real filetype detection;</li>
<li>Full MIME alias mapping;</li>
<li>SVG sanitization (if SVG uploads have been independently allowed);</li>
<li>File upload validation debugger;</li>
<li>Fixes issues related to <a href="https://core.trac.wordpress.org/ticket/40175" rel="nofollow ugc">#40175</a> that have been present since WordPress <code>4.7.1</code>.</li>
<li>Fixes ambiguous media extensions <a href="https://core.trac.wordpress.org/ticket/40921" rel="nofollow ugc">#40921</a></li>
</ul>
<h3>Requirements</h3>
<ul>
<li>WordPress 5.2 or later.</li>
<li>PHP 7.4 or later.</li>
<li><code>dom</code> PHP extension.</li>
<li><code>fileinfo</code> PHP extension.</li>
<li><code>mbstring</code> PHP extension.</li>
<li><code>xml</code> PHP extension.</li>
</ul>
Please note: it is not safe to run WordPress atop a version of PHP that has reached its <a href="http://php.net/supported-versions.php" rel="nofollow ugc">End of Life</a>. Future releases of this plugin might, out of necessity, drop support for old, unmaintained versions of PHP. To ensure you continue to receive plugin updates, bug fixes, and new features, just make sure PHP is kept up-to-date. 🙂
<h3>Privacy Policy</h3>
This plugin does not make use of or collect any “Personal Data”.

Lord of the Files: Enhanced Upload Security

This plugin expands file-related security and sanity around the upload process.

Correct Audio/Video Uploads vs Lord of the Files: Enhanced Upload Security