Wordpress get parameter 'unapproved' and 'moderation-hash'

Question

I have a blog site. And I found a suspicious access to my blog post from log. The url format is like this.

https://example.com/my-post/?unapproved=420&moderation-hash=847492149d817bf7e08d81457bf9952f

And they access from several ips. What is their purpose?

Answer 1

Spammers use the URL of unapproved comments to share around the Internet. This makes the comments viewable until the comment is dealt with via approval process.

WordPress' contributors are working on a patch for the next version. https://core.trac.wordpress.org/ticket/49956

Answer 2

<?php
    $url = $_SERVER['REQUEST_URI'];
    if (strpos($url,'/?') !== false) {
        echo '<meta name="robots" content="noindex, nofollow" />' . "\n";
    }
?>

This is one of the solutions, you can hide pages with GET parameters from the search. Just add it to the header.php file