First of all, lets get basic definitions put forward first.
Hacking, involves knowing vulnerabilities inherent in the software, and if you know if the software has a bug or bad addon somewhere in it, that allows getting into the admin side, without having to guess passwords, then that is hacking.
Cracking, involves pretty much guess work at passwords. This is not the same as hacking, even though many people confuse hacking with cracking. Pretty much, if you do not have a easy to guess password, it will be harder to guess the password, without brute password software's, that will try to break into the account for you. This is why, if you publish anything about yourself online that people can find about you, you do not want to make your password something that relates to that information that can be searched for.
Software can actually be blamed, if it isn't updated frequently, or a bug or line of code isn't tested for vulnerabilities. So, the older the last update, the more likely people will find ways to get into an admin account, without guessing passwords.