To fix this, you need to update your WordPress site url to HTTPS. You can do this by going to your WordPress admin dashboard, then Settings > General, and change both the ‘Site Address (url)’ and ‘WordPress Address (url)’ to use https:// at the start
After that you can use .htaccess rule to force all traffic to https: