_pad_term_counts() uses string-concatenated SQL without prepared statement

$object_types values are not individually escaped via $wpdb->prepare(). They use esc_sql() only at the
  get_taxonomy() call, but imploded directly into the query string. The array keys are integer IDs but are not cast.
  This should use prepare() with placeholders.

Author: rajeshcpr

src/wp-includes/taxonomy.php

@@ -4072,7 +4072,6 @@ function _pad_term_counts( &$terms, $taxonomy ) {
 			array_merge( array_keys( $term_ids ), $object_types )
 		)
 	);
-	
 	foreach ( $results as $row ) {
 		$id = $term_ids[ $row->term_taxonomy_id ];