diff --git a/maint.php b/maint.php
index af10520..3c1f5a0 100644
--- a/maint.php
+++ b/maint.php
@@ -924,9 +924,10 @@ function changemaintType () {
 function schedules(): void {
 	global $actions, $maint_types, $maint_intervals, $yesno;
 
-	$schedules = db_fetch_assoc('SELECT *
+	$schedules = db_fetch_assoc_prepared('SELECT *
 		FROM plugin_maint_schedules
-		ORDER BY name');
+		ORDER BY name',
+		[]);
 
 	form_start('maint.php', 'chk');
 
@@ -1134,10 +1135,11 @@ function clearFilter() {
 							<option value='<?php print MAINT_HOST_FILTER_ANY ?>' <?php if (get_request_var('site_id') == MAINT_HOST_FILTER_ANY) {?> selected<?php }?>><?php print __('Any', 'maint'); ?></option>
 							<option value='<?php print MAINT_HOST_FILTER_NONE ?>' <?php if (get_request_var('site_id') == MAINT_HOST_FILTER_NONE) {?> selected<?php }?>><?php print __('None', 'maint'); ?></option>
 							<?php
-							$sites = db_fetch_assoc('SELECT id, name
+							$sites = db_fetch_assoc_prepared('SELECT id, name
 								FROM sites
 								WHERE id IN (SELECT site_id FROM host)
-								ORDER BY name');
+								ORDER BY name',
+								[]);
 
 	if (cacti_sizeof($sites)) {
 		foreach ($sites as $site) {
@@ -1158,9 +1160,10 @@ function clearFilter() {
 						<select id='poller_id'>
 							<option value='<?php print MAINT_HOST_FILTER_ANY ?>' <?php if (get_request_var('poller_id') == MAINT_HOST_FILTER_ANY) {?> selected<?php }?>><?php print __('Any', 'maint'); ?></option>
 							<?php
-	$pollers = db_fetch_assoc('SELECT id, name
+	$pollers = db_fetch_assoc_prepared('SELECT id, name
 								FROM poller
-								ORDER BY name');
+								ORDER BY name',
+								[]);
 
 	if (cacti_sizeof($pollers)) {
 		foreach ($pollers as $poller) {
diff --git a/setup.php b/setup.php
index 1d3f18e..e56978a 100644
--- a/setup.php
+++ b/setup.php
@@ -298,9 +298,10 @@ function maint_device_action_prepare(array $save): array {
 		}
 
 		// Load schedules to choose from
-		$schedules = db_fetch_assoc('SELECT id, name, enabled, mtype, stime, etime, minterval
+		$schedules = db_fetch_assoc_prepared('SELECT id, name, enabled, mtype, stime, etime, minterval
 			FROM plugin_maint_schedules
-			ORDER BY name');
+			ORDER BY name',
+			[]);
 
 		$select = "<select name='maint_schedule_id' style='min-width:360px'>";
 
diff --git a/tests/test_prepared_statements.php b/tests/test_prepared_statements.php
new file mode 100644
index 0000000..148e113
--- /dev/null
+++ b/tests/test_prepared_statements.php
@@ -0,0 +1,76 @@
+<?php
+/*
+ +-------------------------------------------------------------------------+
+ | Copyright (C) 2004-2026 The Cacti Group                                 |
+ |                                                                         |
+ | Regression checks for prepared DB helper migration in maint plugin      |
+ |                                                                         |
+ | Run: php tests/test_prepared_statements.php                             |
+ +-------------------------------------------------------------------------+
+ */
+
+$pass = 0;
+$fail = 0;
+
+function assert_true($label, $value) {
+	global $pass, $fail;
+
+	if ($value) {
+		echo "PASS  $label\n";
+		$pass++;
+	} else {
+		echo "FAIL  $label\n";
+		$fail++;
+	}
+}
+
+$setup_contents = file_get_contents(__DIR__ . '/../setup.php');
+$maint_contents = file_get_contents(__DIR__ . '/../maint.php');
+
+assert_true('setup.php is readable', $setup_contents !== false);
+assert_true('maint.php is readable', $maint_contents !== false);
+
+$setup_contents = ($setup_contents === false ? '' : $setup_contents);
+$maint_contents = ($maint_contents === false ? '' : $maint_contents);
+
+assert_true(
+	'setup.php uses prepared schedules query',
+	preg_match('/db_fetch_assoc_prepared\s*\(/', $setup_contents) === 1
+	&& preg_match('/\bplugin_maint_schedules\b/', $setup_contents) === 1
+);
+assert_true(
+	'setup.php uses prepared host description lookup',
+	preg_match('/db_fetch_row_prepared\s*\(\s*\'SELECT description FROM host WHERE id = \?/s', $setup_contents) === 1
+);
+assert_true(
+	'setup.php has no raw db_fetch_assoc calls',
+	preg_match('/\bdb_fetch_assoc\s*\(/', $setup_contents) === 0
+);
+assert_true(
+	'setup.php has no raw db_fetch_row calls',
+	preg_match('/\bdb_fetch_row\s*\(/', $setup_contents) === 0
+);
+assert_true(
+	'maint.php uses prepared schedule list query',
+	preg_match('/db_fetch_assoc_prepared\s*\(/', $maint_contents) === 1
+	&& preg_match('/\bplugin_maint_schedules\b/', $maint_contents) === 1
+);
+assert_true(
+	'maint.php uses prepared site list query',
+	preg_match('/db_fetch_assoc_prepared\s*\(/', $maint_contents) === 1
+	&& preg_match('/\bFROM\s+sites\b/i', $maint_contents) === 1
+);
+assert_true(
+	'maint.php uses prepared poller list query',
+	preg_match('/db_fetch_assoc_prepared\s*\(/', $maint_contents) === 1
+	&& preg_match('/\bFROM\s+poller\b/i', $maint_contents) === 1
+);
+assert_true(
+	'maint.php has no raw db_fetch_assoc calls',
+	preg_match('/\bdb_fetch_assoc\s*\(/', $maint_contents) === 0
+);
+
+echo "\n";
+echo "Results: $pass passed, $fail failed\n";
+
+exit($fail > 0 ? 1 : 0);