What you fail to uderstand is that bridge is a transparent ethernet entity. Whatever talks to one port can talk to other ports (this eventually depends on bridge config, such as VLAN settings). Read this explanation about different bridge personalities.
Eventually do as @CGGXANNX suggests: treat untagged WAN as yet another VLAN, untagged on wire.