When patched last week, the bug affected at least 1 million websites. Zero-day exploits were going on then. Active exploits are targeting a recently patched flaw in the popular WordPress plugin ...