Comment spam is one of the most annoying issues in blogs and content management systems. Even if you hide the comment form in the frontend, the WordPress comment endpoint (wp-comments-post.php) remains active by default – and can still be accessed directly.

I’ll explain the details and show you how to prevent comment spam.