The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.