diff --git a/wp-includes/class-wp-customize-widgets.php b/wp-includes/class-wp-customize-widgets.php
index 775e8bbe7f..8569228e46 100644
--- a/wp-includes/class-wp-customize-widgets.php
+++ b/wp-includes/class-wp-customize-widgets.php
@@ -1168,7 +1168,7 @@ final class WP_Customize_Widgets {
 			return;
 		}
 
-		if ( $this->get_instance_hash_key( $decoded ) !== $value['instance_hash_key'] ) {
+		if ( ! hash_equals( $this->get_instance_hash_key( $decoded ), $value['instance_hash_key'] ) ) {
 			return;
 		}
 
diff --git a/wp-includes/version.php b/wp-includes/version.php
index e25dc22914..a169c5217b 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -4,7 +4,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '4.3-RC1-33528';
+$wp_version = '4.3-RC1-33535';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.