Yes, everyone with a link to a file in the /upload folder can download it. If you're looking for private files for selected audiences maybe something like this will help?
https://deliciousbrains.com/protecting-your-wordpress-media-private-files/
Jan Penfrat
npub1qd…qwevs
2026-08-03 09:15:23 UTC
in reply to nevent1q…kgka
Author Public Key
npub1qda00z7usyqlcqhrq92v8279r2p5hk5muuj6vvmsmeyc2h2t2a9qqqwevsSeen on
wss://relay.momostr.pinkPublished at
2026-08-03 09:15:23 UTCEvent JSON
{
"id": "43615b0e95623360edbf2587f9ef8de64fe6dce698a5fd575fe8aee4dcf582d3",
"pubkey": "037af78bdc8101fc02e30154c3abc51a834bda9be725a63370de49855d4b574a",
"created_at": 1785748523,
"kind": 1,
"tags": [
[
"e",
"4bb4f11a5d172cfa7cd1bfb438a330fc67827b93221d4e7d3c382a092ee2ce3d",
"",
"root",
"4f45c39a0aeef6198cf5e4c1c45eeb43ef3ddce6e9166e16c7f0eaeffac766c5"
],
[
"proxy",
"https://eupolicy.social/@ilumium/117030815259575429",
"web"
],
[
"p",
"4f45c39a0aeef6198cf5e4c1c45eeb43ef3ddce6e9166e16c7f0eaeffac766c5"
],
[
"p",
"037af78bdc8101fc02e30154c3abc51a834bda9be725a63370de49855d4b574a"
],
[
"e",
"c34e82760231cfc52c3461ccbd05a20a0c3ce2db945a08ae6c83078c2e019ca5",
"",
"reply",
"4f45c39a0aeef6198cf5e4c1c45eeb43ef3ddce6e9166e16c7f0eaeffac766c5"
],
[
"proxy",
"https://eupolicy.social/users/ilumium/statuses/117030815259575429",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://eupolicy.social/users/ilumium/statuses/117030815259575429",
"pink.momostr"
],
[
"-"
]
],
"content": "Yes, everyone with a link to a file in the /upload folder can download it. If you're looking for private files for selected audiences maybe something like this will help?\n\nhttps://deliciousbrains.com/protecting-your-wordpress-media-private-files/",
"sig": "6585305f5a9a208df6cc0be72343ea20e1bb9b3a79bd5daf26e6ba3b4be3fbd16683f136cffd16616d5b88df8fd87edc8f0d3778cb527855ebeebe1e435fe1b9"
}