Is that SQL query exploitable for really malicious things

Question

I have following SQL query in my WordPress plugin,

SELECT `ID`, `post_content` 
FROM `wp_posts` 
WHERE `post_type` = \'movie\' 
AND `post_status` = \'publish\