Ticket #57512: 57512.diff

src/wp-includes/load.php

@@ -122 +122 @@
         $token    = substr( $header, 6 );
         $userpass = base64_decode( $token );
 
+        // If there is no password provided, exit.
+        if ( ! str_contains( $userpass, ':' ) ) {
+                return;
+        }
+
+        // Split token into $user and $pass variables
         list( $user, $pass ) = explode( ':', $userpass );
 
         // Now shove them in the proper keys where we're expecting later on.