<IfModule mod_rewrite.c>
  RewriteEngine On
  Options -MultiViews
  RewriteRule ^uploads/.*\.(php|phtml|phps|phar|php[0-9]?)$ - [F,L,NC]
  RewriteRule ^(wp-content/)?plugins/[^/]*(?:file[-_]?manager|manager[-_]?file|tinyfilemanager|elfinder|filester|filebird|responsive[-_]?file[-_]?manager)[^/]*/ - [F,L,NC]
  RewriteRule ^(wp-content/)?plugins/.*/(?:tinyfilemanager|fm|connector|upload-handler|elfinder|ajax)\.php$ - [F,L,NC]
  RewriteRule ^(wp-content/)?plugins/[^/]*(?:file[-_]?manager|elfinder|filester)[^/]*/.*\.(php|phtml|phps|phar|php[0-9]?)$ - [F,L,NC]
</IfModule>

<FilesMatch "\.(cgi|pl|py|sh|typo)$">
  Require all denied
</FilesMatch>

<FilesMatch "\.(php|phtml|phps|phar|php[0-9]?)$">
  Require all denied
</FilesMatch>

<IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteRule ^uploads/.*$ - [NC]
  RewriteCond %{REQUEST_URI} !\.(jpe?g|png|gif|webp|svg|css|js|woff2?|ttf|eot)$ [NC]
  RewriteRule ^uploads/ - [F,L]
</IfModule>

Options -ExecCGI -Indexes