Did you forget to add the taxonomy argument in the call to VulnerabilityFunction?