Ticket #17018: 17018-make-them-work.patch

wp-includes/pluggable.php

@@ -1502 +1502 @@
 
         $check = $wp_hasher->CheckPassword($password, $hash);
 
+        // if $password is at least double slashed and check failed, try again with one level of slashes removed.
+        if (!$check && false !== strpos($password, "\\\\")) { 
+                $check = $wp_hasher->CheckPassword(stripslashes($password), $hash);
+        }
+
         return apply_filters('check_password', $check, $password, $hash, $user_id);
 }
 endif;