I renewed two credit cards recently, and both included a new CVC number in addition to the expiry date.
CVCs cannot be used for recurring payments (beyond setting the subscription up) and merchants/acquirers are forbidden from storing them at all.
Expiry dates also aren't always as accurate as you might imagine. You'd think that a card that expires April 2019 wouldn't work in May, yet sometimes (but not always) they will for a month or two, or longer.
December of the current year works for expired credit cards. If a new card was issued with the same number but a different expiration date, you can get a successful payment authorization. It's a little trick.