Mixed content
Why Does My WordPress Site Say “Not Secure”? How to Fix It
The short answer Browsers say “Not Secure” when your site loads over plain HTTP, when its security certificate is missing, expired or wrong, or when a secure page pulls in insecure files. The fix is usually free: turn on your host’s free certificate, switch both WordPress addresses to https, redirect old http links, and replace…