Plugin multi-meta-box found running on commercial Wordpress install. First line of code in the first file (line 10 overall) is a straight forward SQLi.