6.3.12 has vulnerabilityPATCHSTACK:BD9D31151

imunify360 has found this:

advanced-custom-fields version 6.3.12 has vulnerability(s): PATCHSTACK:BD9D311515BB184495B0975518D5B4E0

my server has been compromised with a full ecosystem of malware 3 hours after the email from cpanel / imunify. I got notified that unknown networks acceded to pure-ftp and cpanel, deploying a full ecosystem of malware to get control of the server. I am afraid that the full server needs to be deleted including other accounts, as the malware has gained privileges. Now the server is stopped.

I haven’t found info on search engines about this vulnerability, other than the imunify notification.
do you have guys any info about this issue? I will not use ACF without a vulnerability fix. And please, this is a real case I am dealing with.