Hi @processi
Wordfence does not change file permissions for images.
Have you tested several times in a row deactivating and activating Wordfence on the WordPress Plugins page? If the problem is present when Wordfence is deactivated then Wordfence can’t be involved.
Before deactivating Wordfence make sure the option Delete Wordfence tables and data on deactivation is disabled in the General Wordfence Options section on the All Options page. It is disabled by default.
If the problem is only present when Wordfence is active then it may be due to the firewall seeing legitimate theme or plugin requests as being potentially malicious and blocking them. You can either add these requests to the allowlist via the Learning Mode feature or from the Tools >> Live Traffic tool page. Both allowlisting methods are described in our instructions in the link below:
https://www.wordfence.com/help/firewall/learning-mode/