Just thought I would add an update with other locations that need files updated with the mysql_real_escape_string and replace with $wpdb->prepare
/wp-content/plugins/sermon-browser/sb-includes/ajax.php
/wp-content/plugins/sermon-browser/sb-includes/frontend.php
