Nxploited/CVE-2026-13714 ? reverse-engineered prompt

Build me a small Python command line tool that checks WordPress sites for the WPL Real Estate issue in versions below 5.3.0, then safely tests whether they are vulnerable. It should read a list of target URLs, detect possible WPL installs, and support three modes, one for detection only, one for trying a file upload and checking whether it runs, and one for a safe canary upload that only proves write access.

It should handle sites in subfolders, work with multiple targets at once, and save clear results to log files so I can review what was found later. If you need to look up any current details about the plugin or the request format, do that online first. Make the script self contained, use only the standard library if possible, and make the prompts simple so a non technical user can run it from the terminal without editing code.