I’m having the same issue. I’ve added define(‘WFWAF_ENABLED’, false); to both the wp-config.php and to the wordfence-waf.php file but to my astonishment, the firewall still appears to be active.
I’ve had to disable the plugin for now to get around the problems that it was causing on the site. We’re seeing “A potentially unsafe operation has been detected in your request to this site, and has been blocked by Wordfence” when trying to save changes to a post. Turning off the firewall does not seem to fix the issue, and after refreshing the page, the firewall status reverts back to “Enabled and Protecting”.
I’m eagerly awaiting the next update.
Here’s what we’re running on the server if it’s any help:
Windows Server 2012 R2
IIS 8.5
PhP 7.0