@martijnschuman: Yep I found the issue as well (was hinted in another thread)
[..]
I have deactivatet the disable-wp-rest-api and went with “Cerber” in order to deactivate wp-api with whitelists – you can set there the namespace for exclusion. (contact-form-7)
[..]
Thanks