Hello, When using the WP Discourse plugin, the endpoint /wp-comments-post.php is still active and can be used to post WordPress comments via POST by mostly bot traffic to spam comments. Did I miss a setting in the plugin to disable this? EDIT: For the time being I’ve done the following to stop th…

Hey @jordantrizz , could I just confirm you have Discourse comments enabled (i.e. “Enable Discourse Comments” in the “Commenting” section of the WP Discourse admin is checked)?

Hey @jordantrizz thanks for your patience. I wanted to review this again in light of changes made last year. After reviewing this again, this is in fact a desired aspect of the WP Discourse system, to allow for flexibility in how folks manage native Wordpress and WP Discourse comments (e.g. some pe…

Thanks, and perhaps this should be documented somewhere because I was under the assumption if you shutdown the WordPress comments that the Discourse widget will not be displayed.

WordPress Comment Spam

Support WordPress

jordantrizz (jordantrizz) January 12, 2024, 7:00pm 3

Yes, I do have this checked.

Topic		Replies	Views
Oddity: A Wordpress comment was posted while using WP Discourse WordPress	4	516	February 4, 2023
Why enable wordpress post comments? WordPress	17	2665	October 19, 2018
Configure WP Discourse to display comments from Discourse Administrators wordpress , video , how-to	10	3414	June 25, 2025
Is it possible to post a new comment from WP to Discourse? WordPress	2	1027	May 2, 2020
Comments made in WordPress Mobile app circumvents Discourse WordPress	2	823	October 3, 2019

WordPress Comment Spam

Related topics