It’s actually one of the first thing we often disable, WPS, UPnP, use WPA-PSK2 with AES. MAC addressing and if you feel the need use RADIUS.
Just because it’s easy, that doesn’t mean it’s a good idea.

https://nakedsecurity.sophos.com/2014/09/02/using-wps-may-be-even-more-dangerous/
http://www.howtogeek.com/176124/wi-fi-protected-setup-wps-is-insecure-heres-why-you-should-disable-it/

http://www.computerworld.com/article/2476114/network-security/the-woops-of-wps–wi-fi-protected-setup–raises-its-ugly-head-again.html