site being used to relay messages by suspicious people, criminal activity

[mermax]

please see the COMMENTS section on my site, i am unable to upload the evidence / screenshots here attached. I never set up a COMMENTS page on my site and it seems there is now a comment section and someone is using it to communicate under the radar.

How are they able to do this? Can you please PLUG THIS HOLE so these people cant use my site for information exchange.

please get back to me on this.
​https://maxsharam.com

[mermax]

please see the COMMENTS section on my stite, i am unable to upload the evidence / screenshots here attached. I never set up a COMMENTS page on my site and it seems there is now a comment section and someone is using it to communicate under the radar.

How are they able to do this? Can you please PLUG THIS HOLE so these people cant use my site for information exchange.

please get back to me on this.
​https://maxsharam.com

[sabernhardt]

Hi and welcome to WordPress Core Trac!

This problem would fit better on the ​support forums, and I found a related topic there.
​https://wordpress.org/support/topic/unwanted-comments-on-image-attachment-pages/

You have attachment pages enabled, and at least some of those have an active comments form.
Example: https://www.maxsharam.com/index.php/thespian-max/screen_test-3/

Core has created one way to remove attachment pages in #57913. Another way to remove those pages is to use a plugin such as ​Attachment Pages Redirect or ​Yoast SEO.

If you only wish to remove the comments forms from those pages, you could try one of these:

• ​https://www.wpbeginner.com/wp-tutorials/how-to-completely-disable-comments-in-wordpress/#disable-comments-on-media
• ​https://www.greengeeks.com/tutorials/disable-comments-for-media-attachments-in-wordpress/

I have wanted comments off by default on attachment pages, which might be done in ticket:58375.

Because this issue is not a Core bug, 'invalid' is the most appropriate resolution. In case some of the information in your second ticket was sensitive, I chose to delete the ticket instead of closing it as a duplicate.