A website vulnerability is a weakness or misconfiguration in a website or web application code that allows an attacker to gain some level of control of the site, and possibly the hosting server. Most vulnerabilities are exploited through automated means, such as vulnerability scanners and botnets.
Malware, short for malicious software, is used to gather sensitive data, gain unauthorized access to websites, and even hijack computers.