Vulnerabilities in ACF to REST API 2.1.1