Your site lives on a shared server. Hackers are cruising ALL the sites on any given server looking for the weak link that can get them into another site that does. So yes, all sites are vulnerable. This is simply the reality of having a website.