diff -r 48c4eec2b7e6 -r 8c2e4d02f4ef wp/wp-includes/class-wp-session-tokens.php
--- a/wp/wp-includes/class-wp-session-tokens.php	Fri Sep 05 18:40:08 2025 +0200
+++ b/wp/wp-includes/class-wp-session-tokens.php	Fri Sep 05 18:52:52 2025 +0200
@@ -68,12 +68,7 @@
 	 * @return string A hash of the session token (a verifier).
 	 */
 	private function hash_token( $token ) {
-		// If ext/hash is not present, use sha1() instead.
-		if ( function_exists( 'hash' ) ) {
-			return hash( 'sha256', $token );
-		} else {
-			return sha1( $token );
-		}
+		return hash( 'sha256', $token );
 	}
 
 	/**