You are always vulnerable to a DDoS attack regardless if a port is open or not.
A cracker would need you to download malicious files in order to gain entry.
You can't just 'hack' someone through an open port just because it's open. There needs to be 'instructions' (code in a program) on the computer they're trying to hack.
So in no way are you vulnerable when you open a port.
