Vulnerabilities in ACF to REST API