Gordon’s Tech: WordPress spam comment hole and fix. Posted on October 8, 2014 by jgordon Link. Limiting to ‘registered user only’ seemed to fix the hole.