Serendipity before 0.8 allows Chief users to "hide plugins installed by other users."
Unknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown impact.