The PassWork extension 5.0.9 for Chrome and other browsers allows an malicious user to obtain the cleartext master password.
passwork passwork 5.0.9