title: Wordpress comments security
body: <p>The comments section of the wordpress accepts anything that the user write without filtering the content of it for any malicious entry. I checked this by adding a javascript comment as a comment to my site. Please see the below two points regarding this issue.</p>
  
  <p>1) I have setup my Wordpress site to show comments when the admin approves them. Therefore at the moment any user from the outside will not see any spam comments which I haven't been approved. However, these spam comments are appears when I login as an admin and view the site. Can I block unapproved comments on my posts when I login and view the site as an admin?</p>
  
  <p>2) Are there any technical solutions for this issue? I am using "All-in-one-security&amp;firewall" plugin and "Wordfence" plugin in my blog. It looks like these plugins are not protecting my site from commnts. Are there any free plugin that I can use to stop this thing happening again?</p>