It is not always required to use an SSL certificate for your WordPress site, with the risks being serious, and the rewards of using HTTPS being what they are, you really should just do it to protect your data, reputation and SEO.