I'm going to shoot from the hip & say 'Allow Remote Access the LAN Subnet' got toggled off in the drastic change in firmware that introduced PBR. Look for the 'gear' icons for your tunnels in the VPN Dashboard.
I'd also check the WG configuration routes are still as expected. See below for ideas/approaches: