CVE-2018-25434 | eliekhoury WP AutoSuggest 0.24 GET Request autosuggest.php wpas_keys sql injection (Exploit 45977 / EDB-45977)

A vulnerability categorized as critical has been discovered in eliekhoury WP AutoSuggest 0.24. This affects an unknown function of the file autosuggest.php of the component GET Request Handler. Such manipulation of the argument wpas_keys leads to sql injection.

This vulnerability is referenced as CVE-2018-25434. It is possible to launch the attack remotely. Furthermore, an exploit is available.