If there are such and more complicated special characters that need to be passed through URL then I would normally encode data with MIME base64 and decode it back in the target page.
$url = 'http://localhost/plan-detail.php?planname=' . base64_encode('CoreGuard EPO 10000 2+ Members') . '&st=CA';
And in plan-detail.php page