Fix incorrect $wpdb->prepare() usage