The consumer version of Google+ will now be shut down in April instead of August after a bug was found that impacts at least 50 million users.
Researchers identified a widespread campaign of brute force attacks against WordPress websites.
The company said it has issued a patch for the issue, which has been ongoing since May 2017.
An exploit for the bypass vulnerability required an HTTP parameter pollution in a web application.
Researchers say a 18-year-old programming error by Microsoft is creating a kernel bug that can be abused by an attacker.