How are your vendors logging in?
Are they logging in via the WooCommerce my-account page?
Or are you using some kind of special login from your theme?
They may not be properly logged in via https.
If you login as a vendor using the my-account page, does this still happen?