Basically Wifi Protected Setup (WPS) which is the push-button or PIN based method of setting up WPA/WPA2 security quickly can be compromised (via the PIN method) within 10 hours. I've had mine disabled but a lot of people will have this on by default, even if they don't use it.

Edit: fixed first link.