@faisalahammad
I don’t understand how these URLs are detected in google search console.
I expected this from WordPress. It should not open urls other than the actual URL of the page.
The “*” and “=” characters in the URL do not break the URL.
WordPress system is probably going through a cleaning process and validating the incoming URL.
But since the URL generated in this use is 200 response code, it is crawled by bots.