I just stumbled across a fresh post on blog.whmcs.com: WHMCS Security Advisory for 4.x, 5.x
They say that the patch is fixing 6 security vulnerabilities
I have no idea if WHMCS sent any email update yet, I just checked my inbox and got none. Perhaps it's on its way.
update time, I guess