The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password.