@andrew8192 on WordPress.org
Created ticket #26878 on Core Trac:Question mark in the url doesn't return 404 and can be abused
