LINE UP ALL THE THINGS
Don't double escape xProfile search terms.

See 8ed16a3 — we now use wpdb->prepare(), where we didn’t before. :)