Just install Master Key multi-fix plugin from PlayStore (https://play.google.com/store/apps/details?id=tungstwenty.xposed.masterkeydualfix), activate it in WSM/Xposed and reboot.
After this Bluebox reports that the vulnerability is gone.
You can even uninstall the plugin (hopefully not too much...