A vulnerability is "this function will write 8 bytes of arbitrary data out of bounds in an edge case". Exploitation is the process of using that vulnerability to, typically, cause the process to execute attacker-controlled code.

Something can make exploitation easier without being a vulnerability. For example, disabling exploit mitigations like ASLR does this.