What it is

Comments are open across the entire site with no anti-spam protection in place — an easy target for spam bots and malicious links, and occasionally a stepping stone toward more targeted attacks.

How to fix it

Install an anti-spam plugin (such as Akismet) to keep comments open safely, or close comments site-wide if they aren't needed.

In depth

Your WordPress site currently allows people to leave comments on your posts and pages, but you don't have any spam protection in place. This means bots and spammers can automatically flood your site with comments containing malicious links, fake testimonials, or offensive content, which damages your site's credibility and can harm your search engine rankings. Worse, these spam comments can sometimes be part of larger attacks designed to exploit your site or spread malware to your visitors. The fix is straightforward: you can install a free or paid spam-blocking plugin like Akismet, which automatically filters out spam comments before they appear on your site, or you can simply turn off comments entirely if you don't actually need them for your business. Most site owners find that enabling a spam filter takes just a few minutes to set up and makes a huge difference in keeping their site clean and safe.