EIP-2026-113579

This is a writeup describing a SQL injection vulnerability in WP AutoSuggest 0.24. The vulnerable code in `autosuggest.php` does not properly sanitize the `wpas_keys` parameter, allowing for SQL injection attacks. The example provided uses sqlmap to exploit the vulnerability.