diff --git a/.docker/nginx/conf.d/default.conf b/.docker/nginx/conf.d/default.conf
index e75d1e6..dcc3b80 100644
--- a/.docker/nginx/conf.d/default.conf
+++ b/.docker/nginx/conf.d/default.conf
@@ -21,6 +21,9 @@ server {
     location / {
         try_files $uri $uri/ /index.php$is_args$args;
     }
+    location ~* ^/wp-content/uploads/.*\.php$ {
+        deny all;
+    }
     location ~ \.php$ {
         try_files $uri =404;
         fastcgi_split_path_info ^(.+\.php)(/.+)$;