patch =/= 0-day exploit
And no, it's not the same guys who hacked WHMCS few days ago, as you can read on their page: "ethical programmer" which obviously is different from 'unethical hackers' who leaked their database.