To better understand the difference between website malware and vulnerabilities, imagine your online property is a brick-and-mortar structure. You’d want to keep safe from burglars, so you take measures to protect your house, like locked doors and windows, and installing an alarm system.
It’s the same thing with website security. But with your online property, website malware is the burglar. And website vulnerabilities are the open doors and windows, and lack of an alarm.