CVE-2024-11118 is a CSRF vulnerability in the bilbud 404 Error Monitor WordPress plugin affecting all versions up to 1.1. The issue arises from missing or incorrect nonce validation in the updatePluginSettings() function, enabling attackers to perform unauthorized changes to plugin settings and clear error logs if an administrator is tricked into executing a malicious request. The vulnerability does not require privileges or user interaction beyond the administrator being tricked into clicking a link.

An attacker can cause unauthorized changes to the plugin settings and clear all error logs by exploiting this CSRF vulnerability. This could disrupt monitoring of 404 errors on the affected WordPress site, potentially hiding signs of other malicious activity or misconfigurations. There is no direct confidentiality or availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should be cautious about clicking on untrusted links and consider implementing additional CSRF protections or restricting access to plugin settings where possible.