Stop Search Spam

Stop Search Spam

Did you know that spammers can exploit your WordPress internal site search to advertise their illicit goods and services?

Many WordPress websites have a built-in search function accessible via URLs like example.com/?s=search_term (or example.com/search/search_term/). Malicious bots and spammers abuse this by injecting long promotional texts, links, and unwanted keywords right into your search URLs. For example, they might use example.com/?s=buy-fake-goods-from-my-site.com.

Because WordPress generates a search results page containing these terms, these dynamically generated pages can get crawled and indexed by Google or built into malicious backlink profiles. This creates unauthorized “adverts” on your domain, which leads to severe SEO penalties, keyword diluti…