If you're using WPS to secure your wi-fi you're very vulnerable, I've seen several articles on this:
Why is WPS a problem?
It sounds simple and easy; use a PIN to connect to your wireless instead of a weird string of letters that no one remembers. The issue is how WPS has been deployed/”idiot-proofed.” Unlike a router password, the PIN is something that can’t usually be changed by the router’s owner.
According to paper published by Stefan Viebock, the vulnerability with WPS comes with its easy PIN system which may be simpler for consumers, makes the router completely vulnerable to hacking. Many router manufacturer used a simple string of numbers like 12345670 for ALL of their routers.
Rest of the article with a list of routers:
https://www.flashrouters.com/blog/20...tch-to-dd-wrt/
Edited to add: there's a more comprehensive list
here