diff --git a/wp-includes/user.php b/wp-includes/user.php
index b8275338c8..134258d4fe 100644
--- a/wp-includes/user.php
+++ b/wp-includes/user.php
@@ -462,8 +462,8 @@ function wp_validate_application_password( $input_user ) {
 		return $input_user;
 	}
 
-	// Check that we're trying to authenticate
-	if ( ! isset( $_SERVER['PHP_AUTH_USER'] ) ) {
+	// Both $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] must be set in order to attempt authentication.
+	if ( ! isset( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'] ) ) {
 		return $input_user;
 	}
 
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 4879039944..23d8a5db6a 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -13,7 +13,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '5.7-alpha-49918';
+$wp_version = '5.7-alpha-49919';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.