https://www.officialhacker.com/wordpress-rest-api-bug/
WordPress REST API Bug: Prevent Your Website From Being Hacked