do you know why WordPress restrict so much image extensions to be uploaded? It says it's for security reason. But if websites hosting those files are more vulnerable, then those extensions wouldn't be popular at the first place

@TomJNowell so, it says I need to put the codes in the wp-includes/embed.php file. But I said, I am using a free wordpress.com site. I think I don't have access to edit that PHP file. What else can I do?

@Ooker without specifying which image format you're referring to I don't know how anybody could answer that

@raf you never under any circumstances modify files in wp-includes or wp-admin. If you come across a tutorial that says to do this then either:

That you're using a free wordpress.com site is a huge piece of information though

99% of this sites contents don't apply to you

and nothing I've said is useful to you

Your only options right now, are to contact WP.com support, upgrade to a plan that lets you upload plugins, or migrate to a self hosted WordPress on another host

modifying WP Core files is a massive mistake, and unnecessary unless you're contributing code to WP Core itself for the next version

@TomJNowell svg or webp. I didn't include the specific formats because I thought the reason applies to all formats

SVG is not an image format it's a document format

think of it as more of a PDF

you can use it as an image but you can also insert iframes and script tags into an SVG

that doesn't stop people modifying the mimetype filters and uploading SVG's unaware of the dangers

there is a plugin for SVGs that includes a sanitisation library to make it safe

I also can't find any evidence that WebP has been excluded

the file list is a whitelist, so anything that isn't in it can't be uploaded

so webp isn't supported because support hasn't been added

but a quick search of the core trac shows there is interest