Nxploited/CVE-2026-15981 ? reverse-engineered prompt

Build me a Python tool that checks WordPress sites for the SAML Single Sign On issue described in CVE 2026 15981, then tries the crafted SAMLResponse flow and tells me if it got an admin session. It should be able to read a list of target URLs, run multiple checks in parallel, fingerprint WordPress, detect the miniOrange SAML plugin and its version, pull the metadata and possible IdP issuer URLs, then attempt the bypass and verify whether a wordpress_logged_in cookie was issued.

If it works, I want it to confirm admin access by checking wp admin pages and showing the username and email if possible. Also include clear terminal output for each target, a simple result file with confirmed hits, and a JSON debug mode that explains why a target failed. If you need to, look up current docs online for any library details.