Funnel Builder WordPress plugin is being exploited to steal people's credit cards but the flaw has since been patched.