How to Stop Fake User Registrations and Comment Spam in WordPress
Hundreds of fake subscribers or a comment queue full of junk? Close every registration door, bulk-remove fake users safely and lock down comments.
Field guides
Step-by-step fixes for every website emergency we cover: WordPress errors, outages, hacks, SSL, DNS, email, speed, redirects, stores, SEO and design problems. Plain language first, with the technical depth to back it up.
Hundreds of fake subscribers or a comment queue full of junk? Close every registration door, bulk-remove fake users safely and lock down comments.
The form says “sent” or spins forever, but no entry or email ever shows up. Find out whether the submission or the notification failed, then fix that half.
WordPress says “The link you followed has expired” when you upload a theme, save a setting or submit a form. Find which nonce failed and why, then fix it.
Media uploads fail with an HTTP error, an image processing error or a file type refusal. Read the log, then fix memory, Imagick, file types or folder permissions.
Your site no longer shows up on Google, even for its own name. Find the cause fast: noindex, robots.txt, a manual action, a hack, an outage or a canonical pointing elsewhere.
Every “Why pages aren’t indexed” reason in Search Console, in plain words: what it means, whether to worry, and the exact fix for the ones that matter.
Traffic fell after the new site launched. First prove the drop is real, not broken tracking, then find which pages and queries lost out and why.
A single Disallow: / or a forgotten noindex can hide an entire site from Google. Learn how robots.txt is really parsed, how to test it, and how to protect staging properly.
Google is indexing the wrong version of your pages: parameters, staging copies, attachment pages or archives. See which canonical Google chose and steer it back.
Thousands of POSTs to wp-login.php and xmlrpc.php are slowing your site. Measure the attack in your logs, then layer 2FA, attempt limits, an xmlrpc block and edge rules.
You got an alert that a plugin you run is vulnerable. Read the advisory, decide how urgent it is, patch or replace the plugin, and check whether you were already exploited.
Someone logged in as one of your users. Lock the account, kill its sessions and application passwords, secure the email behind it, then review what it changed.
Your site is buried under traffic. Tell an attack from a viral spike, put Cloudflare in front, challenge or rate limit the hot paths, and lock your origin so it cannot be bypassed.
A security scanner flagged a file on your site. Verify it against official checksums, compare it with a clean copy, check its timestamps and read it safely to decide.
You click Save Menu and the last items vanish or never stick. Find out whether PHP is cutting off the form, a script is failing, or the save is timing out, and fix it.
Your sidebar is empty, the header has no menu and the logo is gone. Nothing was deleted. Learn where each setting lives per theme and how to bring it back.
You edited a template, a header or theme.json and nothing changed. Learn how block themes layer database overrides over theme files, and how to see which one wins.
A theme update wiped your edits, or activating a child theme caused a fatal error or missing styles. Recover the lost code, then build the child theme properly.
Gray squares in the Media Library, soft or pixelated images, crops that do not fit, or a grid that takes ages to load. Find which image size is wrong and regenerate safely.
An accessibility complaint or demand letter landed in your inbox. Here is how to respond calmly, triage your site against WCAG, fix what matters first and document it.
Your menu will not open with Tab, focus vanishes, or a popup traps keyboard users. Test with only a keyboard and fix focus styles, dropdowns, dialogs and skip links.
An audit flagged low contrast or text that breaks when zoomed. Learn how contrast is calculated, how to measure it, and how to fix brand colors, overlays and global styles.
Screen readers announce “button”, “link” or a file name instead of something useful. Fix alt text, icon buttons, vague links, SVGs and div buttons, then test with NVDA and VoiceOver.
Screen reader users cannot tell what a field wants, errors are invisible to them, or a CAPTCHA blocks them. Fix labels, errors, autocomplete, grouping and submit messages.
Search the field manual
Or jump straight to a symptom
Press / to search from any page, Esc to close