An in-depth analysis of CVE-2025-3862: how the Contest Gallery plugin stored XSS works, why it matters, and how to defend your site—including a free plan from WP-Firewall.