Hi, I use disable rest api plugin because I don’t need it (for guests), but that disables CF7 entirely (for guests). Please read this topic here for more details:

https://wordpress.org/support/topic/contact-forrm-7-bypass-solution/

Is API method really required for CF7 to function? In the past, older version worked without it just fine, but now we have to make an exception for it in order to work.

Can you contribute with your knowledge how to make a safer bypass in that case? Introducing nonce may require ajax solution, though, because many use static caching, which could bring whole new set of problems (non functional forms).

Thanks!