iThemes Security Pro 8.5.3

New: Users can register for an account using passkeys on WP Login.
Enhancement: Improve highlighting settings search results.
Bug Fix: Checkbox styling issue on WordPress 6.6.
Bug Fix: If Login Methods is set to "Email Only" use the user's email address for the passkey's name.
Bug Fix: Fire an action when a vulnerability is unresolved due to plugin activation.

Bug Fix: The Security Dashboard widget would not appear on new Solid Security installs.
Bug Fix: Activating a Patchstack license on sites with a www. subdomain would not show the license as active.

Security: Fix a Google reCAPTCHA v3 bypass.
Important: "Automatic (Insecure)" IP detection has been removed. Read more: go.solidwp.com
Tweak: Block repeated session hijacking attacks from the same device even if the user has not specifically blocked the attacker's device. Previously, subsequent attacks after the first block would have their capabilities reduced.
Tweak: Remove the "Accept-Language" and "DNT" header from the list of sources for Trusted Devices.
Tweak: The Updater library has been updated to 1.8.4. The list of Patchstack licensed domains have been removed from the SolidWP licensing page.
Bug Fix: Fix the Trusted Devices "Approve" link in Outlook mail clients.
Bug Fix: The "Privilege Escalation" tab would not appear in a user's profile unless Passwordless Login was enabled.