@igisev on WordPress.org
Created ticket #16370 on Core Trac:Vulnerability: Comment posting by Guest
Created ticket #16338 on Core Trac:BUG: wp_allow_comment 'user_ID'