CVE-2026-92163 still RESERVED after repository advisory GHSA-7p8v-4g9w-9qfp was published #10297

Summary

The repository security advisory GHSA-7p8v-4g9w-9qfp (dartiss/code-embed) was published on August 21, 2026, with CVE-2026-92163 assigned through GitHub as CNA. As of October 10, 2026, the CVE record is still in RESERVED state on cve.org and NVD, and the advisory is not present in the GitHub Advisory Database.

Details

• Repository advisory: GHSA-7p8v-4g9w-9qfp
• CVE ID: CVE-2026-92163
• Published by the maintainer: August 21, 2026
• Product: Code Embed (WordPress plugin, dartiss/code-embed)
• Affected versions: <= 2.6.3
• Patched version: 2.6.4
• Severity: Moderate
• Weaknesses: CWE-79, CWE-862
• Title: Code Embed <= 2.6.3 - Author/Contributor Stored XSS via unscoped global embed-code lookup

Current state

• https://www.cve.org/CVERecord?id=CVE-2026-92163 shows the ID as RESERVED

Request

Could you please publish the CVE record for CVE-2026-92163 to the CVE List, so that it propagates to NVD and downstream vulnerability databases?

Thank you!