Plugin Tag: protect uploads:

Prevent public access to WordPress files and folders. Protect downloads from public access, Role-based folder access, and User base folder access.