The new version WHMCS 3.7.2 is vulnerable too.