Hi everyone,
I am the author of security research.
Bitwarden: latest version (2025.8.1) still vulnerable ![]()
Demo sites: https://websecurity.dev/password-managers/dom-based-extension-clickjacking/
For version status, I recommend following my X account: @marektoth
Bitwarden publishes ‘fix version’ information without my prior testing