I am also having the same exact issue. In the Mime Type Settings settings under the list of allowed mime types and file extensions by WordPress is: xlsm = application/vnd.ms-excel.sheet.macroEnabled.12, and yet, I am still getting the “Sorry, this file type is not permitted for security reasons” error message.