The wordpress-meta-robots plugin up to and including 2.1 for WordPress has wp-admin/post-new.php text SQL injection.
typomedia wordpress meta robots