I set up a WordPress site for a client who wanted to use it as a content management system for their church's website. Therefore, I did not enable any comments because it is merely used as a content management system. Anyways, I am one of the "moderators" on the account and today I received an email letting me know that there was a comment awaiting moderation. I checked the comment and it was definitely spam, but how did they manage to comment when comments weren't even enabled? There's absolutely nowhere on the site to submit a comment! I just wanna make sure that someone is not trying to hack their site or something...ANY help would be so appreciated!