Currently you have no pvid= settings for the ports in /interface bridge port so they all will default to having untagged ingress traffic assigned to VLAN ID 1. Also no /interface bridge vlan so no egress of tagged traffic, see https://help.mikrotik.com/docs/spaces/ROS/pages/328068/Bridging+and+Switching#BridgingandSwitching-BridgeVLANtable. You haven’t indicated if the ports with more than one VLAN are trunk (all VLANs tagged), or hybrid (one VLAN untagged, remainder tagged).
Unless the Mikrotik is behind some other device, so not exposed directly to the internet, you need a good set of firewall rules.
A good reference for VLAN setup is http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1 along with the bridge VLAN filtering examples in the documentation. An /interface bridge entry effectively creates a managed switch within the Mikrotik, along with a bridge-to-CPU port so traffic between services provided by the Mikrotik and the bridge ports - see http://forum.mikrotik.com/t/routeros-bridge-mysteries-explained/147832/1 for more detail.