Clue: Vulnerable dentist's address exchanged (4,4)
Answer: WIDE OPEN
Explanation: Definition: Vulnerable 

A "dentist's address" could be **OPEN WIDE**, which the setter is asking us to "exchange" or swap (around)