On my site a spammer has started posting anonymously. As far as I can tell, wordpress doesn't normally allow this. I've checked and there are no users set up as 'blank' usernames - any ideas how this could be happening?
I also receive spam from legitimate users sometimes, could their accounts have been hacked in some way?
I've installed Akismet and Bad Behaviour, but neither of these seem to be stopping the spam.
Any advice greatly appreciated. I've deleted the spam temporarily but if it would be helpful for me to put it back up, let me know.