A widespread attack is underway to exploit known RCE flaw in Tatsu Builder WordPress plug-in, according to a new report.