In my Wordpress blog (though this may be true of other blogs too), there is a preview web page feature. So when I get a comment with a link, I can hover over the link, and it shows me a preview of the page. I sometimes use this to check possible spam messages. But is there any risk in this? Ie, if the webpage has a script or XSS based attack, can my blog be compromised? Either a general answer, or a Wordpress based answer, will be acceptable. Edit: To make it clear, I'm not talking about any plugin. In wordpress comments section, people can optionally post a link to their website. If you hover your mouse over the link, it generates a preview of the website. That's what I was talking about. This seems to be an inbuilt feature of Wordpress.