iThemes Security Pro 8.5.4

-New Feature: Granular Version Management control. Select which plugins or themes to auto-update. Optionally, use the delay feature to wait for a release to be stable for a certain number of days for sensitive or critical plugins.
-New Feature: Optionally, receive an email notification whenever your Grade Report changes. A maximum of once per-day.
-Tweak: Grade report notice styling and disable the "Resolve Issues" button when working.
-Tweak: Add Security Check Pro debug page.
-Tweak: Display a time diff until the next event on the Debug page.
-Compatibility Fix: 404 detection for plugins that mark is_404 later in the hook sequence.
-Bug Fix: Plugin and theme updates were hidden after updating a single package via the Grade Report.
-Bug Fix: Correct grammar for Email Two-Factor method.
-Bug Fix: Warning when using Grade Report when the Password Requirements module is disabled by constant.
-Bug Fix: The Dashboard Widget did not count users who didn't have a primary provider set.
-Bug Fix: Show "File Scan" button on dashboard widget even if "Write to Files" is disabled.

-Enhancement: Add setting to customize On-Board text.
-Enhancement: Require user to confirm Two-Factor email method when signing up via On-Boarding. Can be disabled by disabling the new Two-Factor Email Confirmation email in the Notification Center.
-Enhancement: Add setting for customizing who is required to use two-factor when "Vulnerable User Protection" and "Vulnerable Site Protection" are enabled and who is presented the On-Board flow.
-Tweak: Check if an IP is blacklisted on page load for compatibility with servers that cannot process server configuration level bans immediately.
-Bug Fix: Provide better error messages in case the server for SSL support detection is non-responsive.

-Enhancement: Add mitigation for the WordPress Attachment File Traversal and Deletion vulnerability.
-Tweak: Display the subject line of the Two-Factor Email when logging in.
-Tweak: Fire a WordPress action whenever settings are updated.
-Bug Fix: Improved input sanitization on the logs page to prevent triggering warnings.
-Bug Fix: Don't track post status transitions to the identical post status.