Vinceweb Shopping Lists provides simple shared-device shopping lists without requiring every person to have a WordPress account.
Create separate lists for different people, protect each list with an optional PIN, and let shoppers plan and complete a trip from a phone, tablet, or desktop.
Features include:
Use the shortcode:
[vinceweb_shopping_list]
For existing installations, the previous [my_shopping_list] and [mothers_shopping_list] shortcodes remain supported as compatibility aliases.
The plugin stores shopping-list profile names, hashed PINs, product names, quantities, prices, store locations, selection state, and shopping state in the local WordPress database.
When a profile is opened, the plugin sets HTTP-only cookies that remember the profile for up to 180 days. The cookies contain a profile identifier and a site-specific authentication token. PINs are stored as WordPress password hashes and are not stored in plain text.
To reduce repeated PIN guessing, failed PIN attempts are temporarily rate-limited using a short-lived transient keyed from a one-way hash of the connecting IP address.
No shopping-list information is transmitted to external services by this plugin.