More $wpdb->prepare() warnings