The PassWork extension 5.0.9 for Chrome and other browsers allows an malicious user to obtain cleartext cached credentials.
passwork passwork 5.0.9