Kodlo Media Manager
by Kodlo 5 (2 reviews)

Kodlo Media Manager

Enable safer SVG and WebP uploads and set rules for file types, sizes, dimensions, filenames, and duplicates in the WordPress Media Library.

Kodlo Media Manager ranks #15,223 among WordPress.org plugins with 100+ active installations, is #1,421 of 6,651 in the Media category, a 5/5 rating from 2 reviews, and was last updated Aug 22, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4
v1.8.7 Current Version v1.8.7
Updated 2 months ago Last Update on 22 Aug, 2026
Refreshed 1 week ago Last Refreshed on
#1,421 of 6,651 in Media Top 25% by installs
View on WordPress.org
Rank
#15,223
— No change
Active Installs
100+
-20.6%
KW Avg Position
98.3
0.5 worse
Downloads
1.4K
+1 today
Support Resolved
0%
— No change
Rating
100%
Review 5 out of 5
5 (2 reviews)

Next Milestone 200

Total Progress 41%
100+ 200+
2,549
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 59 more installs to reach 200+

Rank Changes

14,462 14,842 15,223 15,604 15,984 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
15,211 15,246 15,281 15,316 15,351 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Current #15,223
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
0 10 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0
2 reviews
Overall 100%
5
2 (100%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Kodlo Media Manager. Checked 2 months ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to control what gets uploaded to their media library. It enforces format, size, dimension, and naming rules on uploads, sanitizes filenames, and strips malicious code from SVG files to prevent XSS and XXE attacks.

  • Duplicate Filename Guard
  • Enforce WebP & AVIF formats
  • Filename transliteration and sanitization
  • Custom file size limits per extension
  • Image width/height dimension controls
  • XML-based SVG security sanitizer
  • Regex filename validator
  • Mobile responsive layout

Frequently Asked Questions

Common questions about Kodlo Media Manager

No. It validates configured formats, sizes, dimensions, filenames, duplicate names, and SVG content. It does not compress images, convert JPG or PNG files to WebP or AVIF, or remove unused media.
No. On a fresh installation, SVG and WebP are already allowed in verified WordPress Media Library upload flows. SVG sanitization requires the PHP DOM/XML extension. Existing installations retain their saved rules after an update.
The initial profile encourages a WebP or AVIF workflow. It is only a starting point. Change the applicable rule to Allowed (Media Library Only) or Allowed (Globally) if your project uses JPG, JPEG, or PNG.
WordPress handles administrator-uploaded plugin and theme ZIP packages outside the Media Library. Allowing ZIP globally keeps those native installation workflows available, while WordPress's own capability and package validation still apply. Change the rule only if your site has a different package-upload policy and you have tested the affected administration screens.
Zero or a blank value disables the plugin's per-format size limit for that rule. WordPress, PHP, the web server, and the hosting provider may still impose their own limits.
Allowed (Media Library Only) requires a verified Media Library context. Allowed (Globally) also permits the configured format in other WordPress upload contexts. Blocked (Globally) rejects the format throughout WordPress upload handling.
It blocks exact normalized filename matches, not visually similar images or identical file contents with different names. Each distinct name is queried directly against Media Library attachment metadata. A short-lived hashed lock closes the race between lookup and storage for plugin-managed uploads. If WordPress cannot verify a name, the upload is stopped conservatively and can be retried.
No. Each filename is checked directly against existing _wp_attached_file metadata. The plugin does not rewrite attachment content, add attachment metadata, or maintain a custom filename table. Concurrent plugin-managed uploads use short-lived hashed option locks that do not contain the original filename.
Canonical .svg uploads are parsed locally with PHP's DOM extension. The sanitizer uses element and attribute allowlists, accepts only safe internal fragment references, and rejects document types, entities, external URLs, foreign namespaces, event handlers, and other unsupported active content. Files above the fixed parser ceiling are rejected before DOM parsing.
Yes. Patterns must be anchored and remain within the bounded subset that the plugin can evaluate consistently in PHP and JavaScript. Groups, alternation, backreferences, engine-specific escapes, excessive lengths, invalid quantifiers, and malformed expressions are rejected in favor of the default pattern. A regular expression, often shortened to "regex," is a compact pattern that describes which characters and structure a filename may contain. The MDN Regular Expressions Guide provides an accessible introduction to patterns, character classes, anchors, and quantifiers. The default pattern is ^[a-zA-Z0-9_\.-]+\.[a-zA-Z0-9]+$. The ^ and $ anchors require the complete filename to match. The character classes allow Latin letters, numbers, underscores, hyphens, and dots, while the escaped \. requires a dot before the file extension. You can experiment with patterns using the free regex101 builder and tester. Treat it as a learning and testing aid: regex101 supports syntax that Kodlo Media Manager intentionally rejects. A pattern must still pass the plugin's validation in Settings -> Media, and you should test representative valid and invalid filenames before applying it to a production editorial workflow.

Sign In / Register

You need to sign in or register to use this feature.