Disable Real MIME Check Security & Risk Analysis

wordpress.org/plugins/disable-real-mime-check

Restores the ability to upload non-image files in WordPress 4.7.1 and 4.7.2.

10K active installs v1.0 PHP + WP 4.7.1+ Updated Nov 28, 2017
mediamimeupload
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Disable Real MIME Check Safe to Use in 2026?

Generally Safe

Score 85/100

Disable Real MIME Check has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "disable-real-mime-check" v1.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of dangerous functions, reliance on prepared statements for SQL queries, and proper output escaping are excellent indicators of secure coding practices. Furthermore, the plugin reports zero flows with unsanitized paths or vulnerabilities in its history, suggesting a well-maintained and robust codebase. The minimal attack surface, with no identified AJAX handlers, REST API routes, shortcodes, or cron events, further contributes to its security. However, the lack of nonce and capability checks across all identified entry points, while currently not exploitable due to the absence of those entry points, represents a potential future risk. If the plugin were to introduce any user-facing features or endpoints in future versions without implementing proper authentication and authorization, it could expose the site to security vulnerabilities.

Key Concerns

  • Missing nonce checks
  • Missing capability checks
Vulnerabilities
None known

Disable Real MIME Check Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Disable Real MIME Check Release Timeline

v1.0Current
Code Analysis
Analyzed Mar 16, 2026

Disable Real MIME Check Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Disable Real MIME Check Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
filterwp_check_filetype_and_extdisable-real-mime-check.php:20
Maintenance & Trust

Disable Real MIME Check Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.33
Last updatedNov 28, 2017
PHP min version
Downloads158K

Community Trust

Rating98/100
Number of ratings34
Active installs10K
Developer Profile

Disable Real MIME Check Developer Profile

Sergey Biryukov

25 plugins · 313K total installs

84
trust score
Avg Security Score
86/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Disable Real MIME Check

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Disable Real MIME Check