Input validation vulnerability in GEO my WordPress 4.0.3

The GEO my WordPress plugin for WordPress is vulnerable to a type of cyber attack called SQL Injection. This attack is possible due to inadequate security measures such as not properly escaping user-supplied parameters and not adequately preparing the existing SQL query. If the attacker has administrator-level access, they can append additional SQL queries to the existing query in order to extract confidential information from the database.