temporarily block rest api against wp2shell CVE