WordPress search spam

Recently noticed a spam attack on wordpress search page flooded/injected with thousands of dating, pharmacy keywords causing google to crawl index these pages. We discovered this on global index coverage on Search console.This also causes our server to run high memory. We have seen a huge drop in rankings after July spam update.

https://example.com/search/%E2%9A%87%F0%9F%9A%8D+Online+Pharmacy+-+%F0%9F%92%A0+www.Trust4Me.site+%F0%9F%92%A0+Buy+Lidocain+%F0%9F%9A%8D%E2%9A%87+Purchase+Lidocain+150+Mg/feed/rss2/

https://example.com/?s=%E2%9A%87%F0%9F%9A%8D%20Online%20Pharmacy%20-%20%F0%9F%92%A0%20www.Trust4Me.site%20%F0%9F%92%A0%20Buy%20Depodexafon%20%F0%9F%9A%8D%E2%9A%87%20Depodexafon%20Reviews

We use Wordfence, Wizors theme and latest wordpress version. We modified robots.txt not to index these types of junk pages.
How to disable these types of attacks on wordpress search pages?

• This topic was modified 3 years, 4 months ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Everything else WordPress topic